Discovery TorrentTrader 2.6 - Multiple Vulnerabilities

No description provided by source...

[waraxe-2012-SA#089] - Multiple Vulnerabilities in TorrentTrader 2.08

waraxe-2012-SA089 - Multiple Vulnerabilities in TorrentTrader 2.08 =============================================================================== Author: Janek Vind "waraxe" Date: 17. September 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-89.html Description of vulnerable...

TorrentTrader Classic Multiple Vulnerabilities

TorrentTrader Classic is prone to multiple vulnerabilities. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

TorrentTrader Classic Version Detection

This script detects the installed version of TorrentTrader Classic. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Default credentials

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...

CVE-2009-2157

Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via 1 the origmsg parameter to account-inbox.php; the categ parameter to 2 delreq.php and 3 admin-delreq.php; 4 the choice parameter to index.php; 5 the id...

CVE-2009-2161

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...

Directory traversal

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...

CVE-2009-2160

TorrentTrader Classic 1.09 allows remote attackers to 1 obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to 2 obtain other potentially sensitive information via a direct request to check.php...

CVE-2009-2159

backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/...

CVE-2009-2156

Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...

CVE-2009-2161

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...

CVE-2009-2158

Summary (CVE-2009-2158). TorrentTrader Classic 1.09 is affected by an issue in account-recover.php where random passwords are chosen from an insufficiently large set, making brute-force password recovery feasible for remote attackers. The vulnerability stems from a weak password-generation approa...

CVE-2009-2160

TorrentTrader Classic 1.09 is affected by an information disclosure vulnerability where remote attackers can retrieve configuration details via phpinfo.php (calls phpinfo) and potentially access other sensitive information via check.php. The NVD entry assigns a Medium base score (CVSSv2 5.0) with...

CVE-2009-2159

backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/...

CVE-2009-2159

CVE-2009-2159 affects TorrentTrader Classic 1.09. The vulnerability is in the backup-database.php script, which does not require administrative authentication. This allows remote attackers to trigger creation and retrieval of a backup database by making a direct request and then downloading a .gz...

CVE-2009-2157

CVE-2009-2157 affects TorrentTrader Classic 1.09 and describes multiple SQL injection vulnerabilities across numerous PHP endpoints (e.g., account-inbox.php, delreq.php, admin-delreq.php, index.php, modrules.php, report.php, take-deletepm.php, takedelreport.php, takedelreq.php, takestaffmess.php,...

CVE-2009-2160

TorrentTrader Classic 1.09 allows remote attackers to 1 obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to 2 obtain other potentially sensitive information via a direct request to check.php...

CVE-2009-2156

CVE-2009-2156 affects TorrentTrader Classic 1.09, with multiple XSS vulnerabilities that allow remote authenticated users to inject arbitrary scripts via numerous parameters and fields (e.g., Title in requests.php; Torrent Name in torrents-upload.php; ttversion, SITENAME, CURUSER[username], today...