CVE-2012-4996

2012-09-1919:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.006

Percentile

78.2%

JSON

Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.php.

References

secunia.com/advisories/48245

www.exploit-db.com/exploits/18553

www.osvdb.org/79805

www.osvdb.org/79806

www.securityfocus.com/bid/52283

exchange.xforce.ibmcloud.com/vulnerabilities/73679