Vendors / Torrentflux Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Torrentflux Project records in CISA KEV No Torrentflux Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e-Commerce-Suite (aka 123tkShop) 0.9.1, (3) phpMyBitTorrent 1.2.2, (4) TorrentFlux 2.3, (5) e107 0.7.11, (6) WebZE 0.5.9, (7…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01673 · Published 2008-04-30 · No fix listed CWE-330
Priority LOW 30
Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.4 allow (1) remote attackers to inject arbitrary web script or HTML by leveraging failure to encode file contents when downloading a torrent file or (2…
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01202 · Published 2018-01-16 · No fix listed CWE-79
Priority LOW 26
TorrentFlux 2.4 allows remote authenticated users to delete or modify other users' cookies via the cid parameter in an editCookies action to profile.php.
CVSS 2.0 MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.01696 · Published 2014-09-05 · No fix listed CWE-20
Priority LOW 22
TorrentFlux 2.4 allows remote authenticated users to obtain other users' cookies via the cid parameter in an editCookies action to profile.php.
CVSS 2.0 MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01706 · Published 2014-09-05 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
0 1 3 0 0
THREATIST.IORead the docs