Ubuntu.comUB:CVE-2006-5451CVE-2006-5451
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.05 Low
EPSS
Percentile
92.9%
Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1
allow remote attackers to inject arbitrary web script or HTML via the (1)
action, (2) file, and (3) users array variables in (a) admin.php, which are
not properly handled when the administrator views the Activity Log; and the
(4) torrent parameter, as used by the displayName variable, in (b)
startpop.php, different vectors than CVE-2006-5227.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.10 | noarch | torrentflux | < 2.1-1ubuntu0.2 | UNKNOWN |
| ubuntu | 7.04 | noarch | torrentflux | < 2.1-7 | UNKNOWN |
| ubuntu | 7.10 | noarch | torrentflux | < 2.1-7 | UNKNOWN |
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.05 Low
EPSS
Percentile
92.9%