Unscored CVE-2006-7159 EUVD-2006-7141GHSA-gvgm-9c3p-4m3g

Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arb…

Published Mar 7, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.

References

22322 third-party-advisory
2377 third-party-advisory
20422 vdb-entry
20061006 Vulnerability in Btitracker mailing-list