CVE-2008-2428: Torrenttrader Classic

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) wantusername parameter to account-signup.php, or the (3) receiver parameter to account-inbox.php in a msg action.

Affected products

• Torrenttrader Torrenttrader Classic: version 1.08 only

Published 2008-06-18. Last modified 2026-06-16.