medium6.8Public exploit code
CVE-2009-2101
Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TorrentVolve 1.4 - 'deleteTorrent' Delete Arbitrary File2009-06-11 · webapps · php · Verified
Impact
Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .. (dot dot) in the deleteTorrent parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Castro Xl | Torrentvolve | Version 1.4 |