← Database

CVE-2009-2158

HIGH CVSS: 7.5 Published: 2009-06-22 Modified: 2026-06-16

Description

account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack.

Affected Platforms

Torrenttrader Project Torrenttrader

Weakness Type

CWE-330

References