CVE-2009-2159: Torrenttrader Classic

Medium severity, CVSS 6.4. EPSS: 2.7% chance of exploitation in the next 30 days.

backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/.

Affected products

• Torrenttrader Torrenttrader Classic: version 1.09 only

Published 2009-06-22. Last modified 2026-06-16.