CVE-2009-2160

TorrentTrader Classic 1.09 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2160. PoCs published by waraxe.

AI-analyzed exploit summary This is a detailed technical writeup describing multiple vulnerabilities in TorrentTrader Classic 1.09, including SQL injection, weak password generation, unauthorized database backup, and information leakage. The analysis includes code snippets, attack vectors, and exploitation techniques.

Description

TorrentTrader Classic 1.09 allows remote attackers to (1) obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to (2) obtain other potentially sensitive information via a direct request to check.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by waraxe · textwebappsphp
https://www.exploit-db.com/exploits/8958

This is a detailed technical writeup describing multiple vulnerabilities in TorrentTrader Classic 1.09, including SQL injection, weak password generation, unauthorized database backup, and information leakage. The analysis includes code snippets, attack vectors, and exploitation techniques.

Classification
Writeup 100%
Attack Type
Sqli | Info Leak | Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: TorrentTrader Classic 1.09
Auth required
Prerequisites: Valid user account for some vulnerabilities · Knowledge of email addresses for password reset · Access to mysqldump and gzip utilities for database backup
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (7)

Core 7
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35456
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51148
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/51149
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35369
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8958
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504294/100/0/threaded
Exploit x_refsource_misc
http://www.waraxe.us/advisory-74.html

Scores

EPSS 0.0320
EPSS Percentile 86.5%

Details

CWE
CWE-264
Status published
Products (1)
torrenttrader/torrenttrader_classic 1.09
Published Jun 22, 2009
Tracked Since Feb 18, 2026