CVE-2017-17713

Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the...

CVE-2017-17714

Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon...

PT-2017-14965

Name of the Vulnerable Software and Affected Versions Trape versions prior to 2017-11-05 Description The issue allows for XSS attacks through various parameters and HTTP headers, including the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country...

PT-2017-14964

Name of the Vulnerable Software and Affected Versions Trape versions prior to 2017-11-05 Description The issue allows for SQL injection through various parameters and HTTP headers, including the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, and several /register...