CVE-2007-4536

Published: Aug 25, 2007Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying (1) disclaimer.txt, (2) sponsors.txt, and (3) banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend to other files.

Affected (1)

Products: Torrenttrader: Torrenttrader

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Torrenttrader Torrenttrader	Up to 1.07

References (10)

http://osvdb.org/40257

Source: cve@mitre.org

http://secunia.com/advisories/26679

Source: cve@mitre.org

http://www.attrition.org/pipermail/vim/2007-August/001774.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/25536

Source: cve@mitre.org

http://www.torrenttrader.org/index.php?showtopic=5843

Source: cve@mitre.org

http://osvdb.org/40257

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/26679

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.attrition.org/pipermail/vim/2007-August/001774.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25536

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.torrenttrader.org/index.php?showtopic=5843

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.