CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

CVE-2007-4536: Undefined Security Weakness

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

CVE-2007-4536

TorrentTrader 1.07 and earlier is affected by an insecure file-permissions flaw in the root directory. Attackers can modify files used by an include call (disclaimer.txt, sponsors.txt, banners.txt) to execute arbitrary PHP code. The vulnerability is localized (LOCAL attack vector) with partial co...

Sql injection

Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 account-inbox.php, 2 account-settings.php, and possibly 3 backend/functions.php...

CVE-2007-4435

Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 account-inbox.php, 2 account-settings.php, and possibly 3 backend/functions.php...

CVE-2007-4435

Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 account-inbox.php, 2 account-settings.php, and possibly 3 backend/functions.php...

CVE-2007-4435

CVE-2007-4435 describes multiple SQL injection vulnerabilities in TorrentTrader prior to 1.07. The affected components include (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php. The exact root cause is not detailed here beyond the presence of SQL injection in...

CVE-2007-4435: Undefined Security Weakness

Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 account-inbox.php, 2 account-settings.php, and possibly 3 backend/functions.php...

torrent_exp.php.txt

Usage: /$ php4 -q ./ttsqlipoc.php "http://127.0.0.1/torrenttrade"/ !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS [email protected] 31-August-2004 "TorrentTrader http://www.torrenttrader.com/ is a feature packed and highly customisable open-source BitTorrent...

[SA12439] TorrentTrader "id" SQL Injection Vulnerability

TITLE: TorrentTrader "id" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA12439 VERIFY ADVISORY: http://secunia.com/advisories/12439/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information, Manipulation of data WHERE: From remote SOFTWARE:...

TorrentTrader 1.0 RC2 - SQL Injection

TorrentTrader 1.0 RC2 - SQL Injection !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com 31-August-2004 "TorrentTrader http://www.torrenttrader.com/ is a feature packed and highly customisable open-source BitTorrent tracker." This PoC dumps th...

TorrentTrader download.php id Parameter SQL Injection

The remote host is running TorrentTrader, a web-based BitTorrent tracker. The remote version of this software is vulnerable to a SQL injection attack that may allow an attacker to inject arbitrary SQL statements in the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

TorrentTrader 1.0 RC2 SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================== TorrentTrader 1.0 RC2 SQL Injection Exploit =========================================== !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com...

TorrentTrader 1.0 RC2 SQL Injection Exploit

No description provided by source. !/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com 31-August-2004 "TorrentTrader http://www.torrenttrader.com/ is a feature packed and highly customisable open-source BitTorrent tracker." This PoC dumps the...

TorrentTrader 1.0 RC2 - SQL Injection

!/usr/bin/php ? / TorrentTrader 1.0 RC2 SQL Injection Proof of Concept By aCiDBiTS acidbitsathotmail.com 31-August-2004 "TorrentTrader http://www.torrenttrader.com/ is a feature packed and highly customisable open-source BitTorrent tracker." This PoC dumps the username and password's md5 hash of...