high7.5Public exploit code
CVE-2009-2158
account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TorrentTrader Classic 1.09 - Multiple Vulnerabilities2009-06-15 · webapps · php · Verified
Impact
account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torrenttrader Project | Torrenttrader | Version 1.09 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/504294/100/0/threaded
- http://www.securityfocus.com/bid/35369
- http://www.waraxe.us/advisory-74.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51150
- https://www.exploit-db.com/exploits/8958
- http://www.securityfocus.com/archive/1/504294/100/0/threaded
- http://www.securityfocus.com/bid/35369
- http://www.waraxe.us/advisory-74.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51150
- https://www.exploit-db.com/exploits/8958