| Package | Affected versions | Patched versions |
|---|---|---|
| bti-tracker | = 1.3.2 | |
| btitracker | = 1.3.2 |
Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free