PT-2008-2765 · Torrenttrader · Torrenttrader Classic

Dominus + 1 · Published 2008-03-06 · Updated 2018-10-11 · CVE-2008-1172

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TorrentTrader Classic version 1.08

Description The issue concerns cross-site request forgery (CSRF) vulnerabilities in the account-inbox.php file. This allows remote attackers to perform certain actions as other users, such as sending messages.

Recommendations For TorrentTrader Classic version 1.08, consider implementing CSRF protection mechanisms, such as token-based validation, to prevent unauthorized actions. As a temporary workaround, restrict access to the account-inbox.php file to minimize the risk of exploitation.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2008-1172

Affected Products

Torrenttrader Classic

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2008-1172 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40981 · Note
• http://securityreason.com/securityalert/3713 · Note
• http://securityfocus.com/archive/1/489039/100/0/threaded · Note