4.6

CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying (1) disclaimer.txt, (2) sponsors.txt, and (3) banners.txt, which are used in an include call.  NOTE: there might be local attack vectors that extend to other files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Torrenttrader ≫ Torrenttrader Version <= 1.07
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.237
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://osvdb.org/40257
http://secunia.com/advisories/26679
http://www.attrition.org/pipermail/vim/2007-August/001774.html
http://www.securityfocus.com/bid/25536
http://www.torrenttrader.org/index.php?showtopic=5843