medium5.0Public exploit code
CVE-2009-2160
TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo functio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TorrentTrader Classic 1.09 - Multiple Vulnerabilities2009-06-15 · webapps · php · Verified
Impact
TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to (2) obtain other potentially sensitive information via a direct request to check.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torrenttrader | Torrenttrader Classic | Version 1.09 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/35456
- http://www.securityfocus.com/archive/1/504294/100/0/threaded
- http://www.securityfocus.com/bid/35369
- http://www.waraxe.us/advisory-74.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51149
- https://www.exploit-db.com/exploits/8958
- http://secunia.com/advisories/35456
- http://www.securityfocus.com/archive/1/504294/100/0/threaded
- http://www.securityfocus.com/bid/35369
- http://www.waraxe.us/advisory-74.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51149
- https://www.exploit-db.com/exploits/8958