Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbitrary files via sequences in the alias_file parameter.
https://www.exploit-db.com/exploits/2786
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-6311