maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
torrentflux torrentflux 2.2 |