CVE-2007-5311

EPSS 3.1%

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ss_uri parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4500unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/37652 http://secunia.com/advisories/27109 http://securityreason.com/securityalert/3207 https://exchange.xforce.ibmcloud.com/vulnerabilities/37004 https://www.exploit-db.com/exploits/4500 http://www.securityfocus.com/archive/1/481749/100/0/threaded http://www.vupen.com/english/advisories/2007/3451