CVE-2007-5311

🗓️ 09 Oct 2007 21:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to execute arbitrary local files

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2007-5311	9 Oct 200721:00	–	cvelist
Exploit DB	TorrentTrader Classic 1.07 - Multiple Vulnerabilities	8 Oct 200700:00	–	exploitdb
EUVD	EUVD-2007-5291	7 Oct 202500:30	–	euvd
NVD	CVE-2007-5311	9 Oct 200721:17	–	nvd
Prion	Directory traversal	9 Oct 200721:17	–	prion

NVD

Node

torrenttrader torrenttraderMatch1.07classic_edition

Source	Link
secunia	www.secunia.com/advisories/27109
vupen	www.vupen.com/english/advisories/2007/3451
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/37004
securityreason	www.securityreason.com/securityalert/3207
exploit-db	www.exploit-db.com/exploits/4500
osvdb	www.osvdb.org/37652
securityfocus	www.securityfocus.com/archive/1/481749/100/0/threaded

Parameter	Position	Path	Description	CWE
ss_uri	query param	backend/admin-functions.php?ss_uri=dd	Directory traversal leading to local file inclusion via ss_uri parameter	CWE-22
color	query param	pjirc/css.php?color=<script>alert(document.cookie);</script>	Cross-site scripting via color parameter in CSS endpoint	CWE-22
cat	query param	browse.php?cat=<script>alert(document.cookie);</script>	Cross-site scripting via category parameter in browse endpoint	CWE-22

16 Jun 2026 22:45Current

7.1High risk

Vulners AI Score7.1

CVSS 27.5

EPSS0.03097

CWE-22