CVE-2006-7159

Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via…

published March 7, 2007

CVSS
—
EPSS
2%
Percentile
74.8
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01546 · 74.8th percentile
Published
2007-03-07T20:00Z
EPSS history
Timeline
  • 07 MAR 20:00Z
    Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via…
    cvelistv5