• info
• discussion
• exploit
• solution
• references

TorrentTrader Download.PHP SQL Injection Vulnerability

Solution:
The vendor has released the following manual fix, users are advised to carry out these changes as soon as possible:

- Open your download.php file
- Find this :
//$id = $_GET["id"];
around line 7 and replace it by this
$id = (int)$_GET["id"];