Torrentpier vulnerabilities
We track 3 vulnerabilities in Torrentpier products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2025.
Latest Torrentpier vulnerabilities
- 8.8 High severity
torrentpier: Improper Neutralization of Special Elements used in an SQL Command
TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In versions up to and including 2.8.8, an authenticated SQL injection vulnerability exists in the moderator control panel (`modcp.php`). Users with moderator permissions ca
- 9.8 Critical severity
torrentpier: Deserialization of Untrusted Data
TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In `torrentpier/library/includes/functions.php`, `get_tracks()` uses the unsafe native PHP serialization format to deserialize user-controlled cookies. One can use phpggc a
- 9.8 Critical severity
Torrentpier: Deserialization of Untrusted Data
Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.