What’s Vulnerable › Vulnerabilities

CVE-2006-7159

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-03-07 · updated 2026-06-16

Description

Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.

Affected products

• Bti-Tracker: 1.3.2
• Btitracker: 1.3.2

References

• http://secunia.com/advisories/22322
• http://securityreason.com/securityalert/2377
• http://www.securityfocus.com/archive/1/447928/100/0/threaded
• http://www.securityfocus.com/bid/20422
• http://secunia.com/advisories/22322
• http://securityreason.com/securityalert/2377
• http://www.securityfocus.com/archive/1/447928/100/0/threaded
• http://www.securityfocus.com/bid/20422

Get alerted when CVE-2006-7159 or the next vulnerability affects your stack