CVE-2006-6604

CVE-2006-6604 describes a directory traversal vulnerability in TorrentFlux 2.2, specifically within the downloaddetails.php script. This flaw allows authenticated attackers to read arbitrary files on the server by manipulating the 'alias' parameter with dot-dot-slash sequences. The vulnerability carries a CVSS score of 6.5, indicating a medium severity with low attack complexity, requiring authentication, and potentially leading to partial confidentiality, integrity, and availability impacts. While not listed on CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.