Directory traversal

2009-06-2219:30:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.5%

JSON

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the ss_uri parameter, in conjunction with a modified component name.

CPENameOperatorVersion
torrenttrader_classiceq1.09

CPE	Name	Operator	Version
	torrenttrader_classic	eq	1.09

References

secunia.com/advisories/35456

www.securityfocus.com/archive/1/504294/100/0/threaded

www.securityfocus.com/bid/35369

www.waraxe.us/advisory-74.html

exchange.xforce.ibmcloud.com/vulnerabilities/51146

www.exploit-db.com/exploits/8958