CVE-2006-6328: Torrentflux

Medium severity, CVSS 4.9. EPSS: 2.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the alias_file parameter.

Affected products

• Torrentflux Torrentflux: version 2.2 only

Published 2006-12-06. Last modified 2026-06-16.