CVE-2009-2159

backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup…

published June 22, 2009

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02704 · 85.8th percentile
Published
2009-06-22T19:00Z
EPSS history
Timeline
  • 22 JUN 19:00Z
    backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup…
    cvelistv5