Every CVE Search/ Get API key

CVE-2004-1212

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote...

5.0 MediumPublic exploit

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.

Exploit likelihood

3.23%Down 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.

Record
CVE-2004-1212
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.

Record
CVE-2004-1212
Updated
2026-11-02
EUVDEUVD-2004-1209 No score

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.

Record
EUVD-2004-1209
Updated
2026-11-03
GitHub AdvisoriesGHSA-4253-45p9-7hm6 No score

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote...

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.

Record
GHSA-4253-45p9-7hm6
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBBlog Torrent 0.8 - Directory Traversal2004-12-02

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2004-1212 is a medium vulnerability (CVSS 5.0) in Blog Torrent Preview, published December 15, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.23%, the 88th percentile. No source names a fixed version.

References

MoveEnter Open