NVD

Id
49423  
Name
CVE-2009-2161  
Description
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ss_uri parameter, in conjunction with a modified component name.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-06-22  
Modified Date
2009-06-25  
Seq
2009-2161  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250027 49423 CVE-2009-2161 8958  View
250028 49423 CVE-2009-2161 20090615 [waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09  View
250029 49423 CVE-2009-2161 35369  View
250030 49423 CVE-2009-2161 http://www.waraxe.us/advisory-74.html  View
250031 49423 CVE-2009-2161 torrenttrader-ssuri-file-include(51146)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45095 JVNDB-2009-006102 TorrentTrader Classic の backend/admin-functions.php におけるディレクトリトラバーサルの脆弱性 TorrentTrader Classic の backend/admin-functions.php には、大文字と小文字を区別しない Web サイトで使用されている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2009-2161 39592 CVE-2009-2161 49423 5.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006102.html 2009-06-22 2012-12-20 View