47 matches found
RivetTracker cross-site scripting vulnerability
RivetTracker is a modified version of PHPBTracker by Azizul Hakimi Mohd Yussuf Izzudin, an individual developer. RivetTracker suffers from a cross-site scripting vulnerability that stems from a problem with the function changeColor in the file css.php, where the operation of the parameter setcss...
CVE-2012-10003: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in ahmyi RivetTracker. This issue affects some unknown processing. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be initiated remotely. The patch is named...
CVE-2012-10002: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in ahmyi RivetTracker. It has been declared as problematic. Affected by this vulnerability is the function changeColor of the file css.php. The manipulation of the argument setcss leads to cross site scripting. The attack can be launched remotely. The patch is named...
PT-2023-9940 · Unknown · Ahmyi Rivettracker
Name of the Vulnerable Software and Affected Versions: ahmyi RivetTracker affected versions not specified Description: A problematic issue has been found in ahmyi RivetTracker, affecting some unknown processing. The manipulation of the argument $ SERVER'PHP SELF' leads to cross site scripting. Th...
Rivettracker <= 1.03 - Multiple SQL injection
No description provided by source. Exploit Title: Multiple SQL injections in rivettracker =1.03 Date: 2/3/2012 Author: Ali Raheem Software Link: http://www.rivetcode.com/software/rivettracker/ Version: =1.03 Tested on: Linux guruplug-debian 3.1.7 2 PREEMPT Tue Jan 3 20:19:54 MST 2012 armv5tel...
RivetTracker multiple SQL injection vulnerabilities-vulnerability warning-the black bar safety net
Affected system: rivettracker rivettracker =1.03 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 2 2 8 3 CVE ID: CVE-2 0 1 2-4 9 9 6 RivetTracker is PHPBTTracker the revised version by"DeHackEd"with PHP, using MySQL as the database...
CVE-2012-4993
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
CVE-2012-4996
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
Code injection
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
Sql injection
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4993
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
CVE-2012-4996
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4993
CVE-2012-4993 affects RivetTracker 1.03 and earlier. The vulnerability arises from torrent_functions.php failing to properly restrict access, enabling remote attackers to cause an unspecified impact. Exploit details are not provided in the documents beyond the linked exploit-db item; no remediati...
CVE-2012-4996
Summary (CVE-2012-4996) : RivetTracker 1.03 and earlier is affected by multiple SQL injection vulnerabilities in the hash parameter of the pages dltorrent.php and torrent_functions.php. The underlying issue enables remote attackers to craft inputs that could lead to arbitrary SQL execution, compr...
CVE-2012-4996: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4993: Undefined Security Weakness
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
PT-2012-5714
Name of the Vulnerable Software and Affected Versions RivetTracker versions 1.03 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the hash parameter to specific API endpoints, such as "dltorrent.php" or "torrent functions.php"...
PT-2012-5711
Name of the Vulnerable Software and Affected Versions RivetTracker versions 1.03 and earlier Description The issue is related to the torrent functions.php file, which does not properly restrict access. This allows remote attackers to have an unspecified impact. Recommendations For RivetTracker...
Multiple SQL injections in rivettracker <=1.03
Exploit Title: Multiple SQL injections in rivettracker =1.03 Date: 2/3/2012 Author: Ali Raheem Software Link: http://www.rivetcode.com/software/rivettracker/ Version: =1.03 Tested on: Linux guruplug-debian 3.1.7 2 PREEMPT Tue Jan 3 20:19:54 MST 2012 armv5tel GNU/Linux Greets: spyware, dividead...
rivettracker <=1.03 Multiple SQL injection
Exploit for php platform in category web applications Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contai...