CVE-2009-2160 TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to (2) obt...
MediumCVSS 5.0
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to (2) obtain other potentially sensitive information via a direct request to check.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| torrenttrader classic | = 1.09 | No fix listed |
References
- 35456 third-party-advisory vendor-advisory
- 20090615 [waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09 mailing-list
- 35369 exploit vdb-entry
- www.waraxe.us exploit
- torrenttrader-check-info-disclosure(51148) vdb-entry
- torrenttrader-phpinfo-info-disclosure(51149) vdb-entry
- 8958 exploit