index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in the kill parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Torrentflux | Torrentflux | 2.2 (including) | 2.2 (including) |
Torrentflux | Ubuntu | devel | * |
Torrentflux | Ubuntu | edgy | * |
Torrentflux | Ubuntu | feisty | * |
Torrentflux | Ubuntu | gutsy | * |