Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the url_upload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TorrentFlux 远程PHP脚本执行漏洞
Vulnerability Description
TorrentFlux是一款基于PHP的BitTorrent下载客户端，它可通过一个便利的Web界面管理所有的Torrent下载。如果架设在Web服务器上，便可以通过Web界面对BitTorrent下载进行管理。 TorrentFlux在处理下载文件的浏览时存在漏洞，远程攻击者可能利用此漏洞在用户系统上执行恶意代码。 如果用户受骗使用TorrentFlux下载了包含有backdoor.php文件的torrent的话，则在http://localhost/torrentflux_2.3/html/downl
CVSS Information
N/A
Vulnerability Type
N/A