CVE-2006-7159: Bti-Tracker

Medium severity, CVSS 6.4. EPSS: 1.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.

Affected products

• Bti-Tracker Bti-Tracker: version 1.3.2 only
• Btitracker Btitracker: version 1.3.2 only

Published 2007-03-07. Last modified 2026-06-16.