CVE-2007-4435: Torrenttrader

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php.

Affected products

• Torrenttrader Torrenttrader: up to and including 1.06

Published 2007-08-20. Last modified 2026-06-16.