Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2159. PoCs published by waraxe.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in TorrentTrader Classic 1.09, including SQL injection, weak password generation, unauthorized database backup, and information leakage. The analysis includes code snippets, attack vectors, and exploitation techniques.
Description
backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/.
Exploits (1)
This is a detailed technical writeup describing multiple vulnerabilities in TorrentTrader Classic 1.09, including SQL injection, weak password generation, unauthorized database backup, and information leakage. The analysis includes code snippets, attack vectors, and exploitation techniques.