CVE-2007-4831: Torrenttrader

Low severity, CVSS 2.6. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the (1) avatar and (2) title parameters.

Affected products

• Torrenttrader Torrenttrader: version 1.07 only

Published 2007-09-12. Last modified 2026-06-16.