index.php for TorrentFlux 2.2 allows remote malicious users to delete files by specifying the target filename in the delfile parameter.
torrentflux torrentflux 2.2