CVE-2006-7159

MEDIUM 6.4CVE-2006-7159 · Published 07/03/2007 · updated 16/06/2026

In short

CVE-2006-7159 is a MEDIUM (CVSS 6.4) vulnerability affecting bti-tracker (bti-tracker), btitracker (btitracker).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bti-tracker bti-tracker	`= 1.3.2`	No fix yet
btitracker btitracker	`= 1.3.2`	No fix yet

Description

Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.

References

secunia.com/advisories/22322 · Patch
securityreason.com/securityalert/2377
securityfocus.com/archive/1/447928/100/0/threaded
securityfocus.com/bid/20422

More vulnerabilities in bti-tracker

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free