What’s Vulnerable › Vulnerabilities

CVE-2007-4435

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-08-20 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php.

Affected products

• Torrenttrader: through 1.06

References

• http://secunia.com/advisories/26504
• http://www.osvdb.org/36598
• http://www.osvdb.org/36599
• http://www.osvdb.org/36600
• http://www.securityfocus.com/bid/25369
• http://www.torrenttrader.org/index.php?showtopic=5776
• http://www.torrenttrader.org/index.php?showtopic=6255
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36119
• http://secunia.com/advisories/26504
• http://www.osvdb.org/36598
• http://www.osvdb.org/36599
• http://www.osvdb.org/36600

Get alerted when CVE-2007-4435 or the next vulnerability affects your stack