CVE-2009-2101 - Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .

Published Jun 17, 2009

6.8

MEDIUM

CVSS 2.0

EPSS 1.92%

Description

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .. (dot dot) in the deleteTorrent parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2097
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51088
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8931
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2097		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51088		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8931		exploitx_refsource_EXPLOIT-DB