Description
Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable, probably obtained from the User-Agent HTTP header, and possibly (2) the $ip_resolved variable.
References
- 1017007 vdb-entry
- 22293 third-party-advisory
- torrentflux-admin-xss(29374) vdb-entry
- http://www.stevenroddis.com.au/2006/10/06/torrentflux-user-agent-xss-vulnerability/
- 20061006 TorrentFlux User-Agent XSS Vulnerability mailing-list
- 1706 third-party-advisory
- 20371 vdb-entry