Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TorrentFlux 跨站脚本攻击漏洞
Vulnerability Description
TorrentFlux是一款基于PHP的BitTorrent下载客户端,它可通过一个便利的Web界面管理所有的Torrent下载。如果架设在Web服务器上,便可以通过Web界面对BitTorrent下载进行管理。 TorrentFlux 脚本html/index.php 存在跨站脚本攻击漏洞,远程攻击者可以通过addUser操作劫持管理员增加用户请求。
CVSS Information
N/A
Vulnerability Type
N/A