CVE-2024-40624

Name of the Vulnerable Software and Affected Versions TorrentPier versions prior to 2.4.4

Description The issue arises from the use of the unsafe native PHP serialization format to deserialize user-controlled cookies in the get tracks() function, located in torrentpier/library/includes/functions.php. This can be exploited using phpggc and the Guzzle/FW1 chain to write PHP code to an arbitrary file and execute commands on the system. For example, the cookie bb t is deserialized when browsing to viewforum.php.

Recommendations For versions prior to 2.4.4, upgrade to version 2.4.4 as soon as it is available to address the issue. As a temporary workaround, consider restricting access to the viewforum.php endpoint and avoiding the use of the bb t cookie until the issue is resolved.