CVE-2009-2158: Torrenttrader Project Torrenttrader

High severity, CVSS 7.5. EPSS: 4.5% chance of exploitation in the next 30 days.

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack.

Affected products

• Torrenttrader Project Torrenttrader: version 1.09 only

Published 2009-06-22. Last modified 2026-06-16.