CVE-2008-1172

TorrentTrader Classic 1.08 - CSRF

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages.

Scores

EPSS 0.0013
EPSS Percentile 32.1%

Classification

CWE
CWE-352
Status draft

Affected Products (2)

torrenttrader/torrenttrader
torrenttrader/torrenttrader_classic

Timeline

Published Mar 06, 2008
Tracked Since Feb 18, 2026