CVE-2006-6598: Torrentflux

Medium severity, CVSS 6.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the path parameter, a different vector than CVE-2006-6328.

Affected products

• Torrentflux Torrentflux: up to and including 2.2
• Torrentflux Torrentflux-b4rt: up to and including 2.1_b4rt971; version 2.1_b4rt3 only; version 2.1_b4rt4 only; version 2.1_b4rt5 only; version 2.1_b4rt6 only; version 2.1_b4rt7 only; …

Published 2006-12-15. Last modified 2026-06-16.