Skip to main content

Torrentflux

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2014-6029 Sep 05, 14:55 MEDIUM POC This Month

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Information Disclosure Torrentflux Torrentflux Project
NVD
CVSS 2.0
4.9
EPSS
0.6%
CVE-2014-6028 Sep 05, 14:55 MEDIUM POC This Month

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Torrentflux Torrentflux Project
NVD
CVSS 2.0
4.0
EPSS
0.3%
CVE-2014-6029
EPSS 1% CVSS 4.9
MEDIUM POC This Month

TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP Information Disclosure Torrentflux +1
NVD
CVE-2014-6028
EPSS 0% CVSS 4.0
MEDIUM POC This Month

TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Torrentflux +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy