VULNERABILITY INTELLIGENCE

CVE-2009-2159

CVSS score6.4 MEDIUM
EPSS probability2.70%
CISA KEVNot currently listed
Published2009-06-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/.

Weakness classification

  • CWE-287: Improper Authentication

Primary references