CVE:CVE-2006-7159
CNNVD:CNNVD-200703-253
BTI-Tracker 1.3.2 (又称btitracker)的include/prune_torrents.php中存在目录遍历漏洞。远程攻击者可以借助prune操作中TORRENTSDIR参数里的".."序列，删除任意文件。
solution:Upgrade bti-tracker bti-tracker to a higher version than 1.3.2,and avoid the version 1.3.2; Upgrade btitracker btitracker to a higher version than 1.3.2,and avoid the version 1.3.2