CVE-2009-2157

TorrentTrader Classic 1.09 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2157. PoCs published by waraxe.

AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in TorrentTrader Classic 1.09, including SQL injection, weak password generation, unauthorized database backup, and information leakage. The analysis includes code snippets, attack vectors, and exploitation techniques.

Description

Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via (1) the origmsg parameter to account-inbox.php; the categ parameter to (2) delreq.php and (3) admin-delreq.php; (4) the choice parameter to index.php; (5) the id parameter to modrules.php in an edited (aka edit) action; the (6) user, (7) torrent, (8) forumid, and (9) forumpost parameters to report.php; (10) the delmp parameter to take-deletepm.php; (11) the delreport parameter to takedelreport.php; (12) the delreq parameter to takedelreq.php; (13) the clases parameter to takestaffmess.php; and (14) the warndisable parameter to takewarndisable.php; and allow remote attackers to execute arbitrary SQL commands via (15) the wherecatin parameter to browse.php, (16) the limit parameter to today.php, and (17) the where parameter to torrents-details.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by waraxe · textwebappsphp
https://www.exploit-db.com/exploits/8958

This is a detailed technical writeup describing multiple vulnerabilities in TorrentTrader Classic 1.09, including SQL injection, weak password generation, unauthorized database backup, and information leakage. The analysis includes code snippets, attack vectors, and exploitation techniques.

Classification
Writeup 100%
Attack Type
Sqli | Info Leak | Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: TorrentTrader Classic 1.09
Auth required
Prerequisites: Valid user account for some vulnerabilities · Knowledge of email addresses for password reset · Access to mysqldump and gzip utilities for database backup
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (11)

Core 11
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51142
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35456
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51181
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35369
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8958
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51179
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504294/100/0/threaded
Exploit x_refsource_misc
http://www.waraxe.us/advisory-74.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51178
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51180
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51143

Scores

EPSS 0.0173
EPSS Percentile 74.6%

Details

CWE
CWE-89
Status published
Products (1)
torrenttrader/torrenttrader_classic 1.09
Published Jun 22, 2009
Tracked Since Feb 18, 2026