CVE:CVE-2007-4435
CNNVD:CNNVD-200708-346
TorrentTrader 1.07版本之前的版本中存在多个SQL注入漏洞。远程攻击者可以借助对(1) account-inbox.php, (2) account-settings.php, 以及可能的(3) backend/functions.php的未明参数，执行任意SQL指令。
solution:Upgrade torrenttrader torrenttrader to a higher version than 1.06,and avoid the version (,1.06]