Torrenttrader

15 CVEs across 2 Torrenttrader products. Browse Torrenttrader vulnerabilities, severities, and proof-of-concept exploits.

Torrenttrader products with known CVEs

ProductCVEs
Torrenttrader9
Torrenttrader Classic8
Torrenttrader CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-21612009-06-22Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attacke…
CVE-2009-21602009-06-22TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo functio…
CVE-2009-21592009-06-22backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup…
CVE-2009-21572009-06-22Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via (1) the origmsg par…
CVE-2009-21562009-06-22Multiple cross-site scripting (XSS) vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via (…
CVE-2008-64182009-03-06SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the info_hash parame…
CVE-2008-44942008-10-09SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL comman…
CVE-2008-24282008-06-18Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) wantuser…
CVE-2008-11732008-03-06Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2008-11722008-03-06Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other…
CVE-2007-53122007-10-09Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the (1) color paramet…
CVE-2007-53112007-10-09Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary…
CVE-2007-48312007-09-12Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML…
CVE-2007-45362007-08-25TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying (1)…
CVE-2007-44352007-08-20Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1)…