VULNERABILITY INTELLIGENCE
CVE-2008-6585
CVSS score6.8 NONE
EPSS probability1.22%
CISA KEVNot currently listed
Published2009-04-03
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action.
Weakness classification
- nvd@nist.gov: CWE-352