116 matches found
CVE-2009-2156
CVE-2009-2156 affects TorrentTrader Classic 1.09, with multiple XSS vulnerabilities that allow remote authenticated users to inject arbitrary scripts via numerous parameters and fields (e.g., Title in requests.php; Torrent Name in torrents-upload.php; ttversion, SITENAME, CURUSER[username], today...
CVE-2009-2156
Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...
CVE-2009-2158: Use of Insufficiently Random Values
account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack...
CVE-2009-2156: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...
CVE-2009-2160: Undefined Security Weakness
TorrentTrader Classic 1.09 allows remote attackers to 1 obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function; and allows remote attackers to 2 obtain other potentially sensitive information via a direct request to check.php...
CVE-2009-2161: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...
PT-2009-4610 · Torrenttrader · Torrenttrader Classic
Name of the Vulnerable Software and Affected Versions: TorrentTrader Classic version 1.09 Description: The issue allows remote attackers to obtain a password via a brute-force attack because the account-recover.php file chooses random passwords from an insufficiently large set. Recommendations: F...
CVE-2009-2159: Improper Authentication
backup-database.php in TorrentTrader Classic 1.09 does not require administrative authentication, which allows remote attackers to create and download a backup database by making a direct request and then retrieving a .gz file from backups/...
CVE-2009-2157: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to execute arbitrary SQL commands via 1 the origmsg parameter to account-inbox.php; the categ parameter to 2 delreq.php and 3 admin-delreq.php; 4 the choice parameter to index.php; 5 the id...
TorrentTrader Classic 1.09 Multiple Remote Vulnerabilities
No description provided by source. waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web:...
[waraxe-2009-SA#074] - Multiple Vulnerabilities in TorrentTrader Classic 1.09
waraxe-2009-SA074 - Multiple Vulnerabilities in TorrentTrader Classic 1.09 =============================================================================== Author: Janek Vind "waraxe" Date: 15. June 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-74.html Description of vulnerable...
TorrentTrader Classic Detection
Detection of TorrentTrader Classic. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Sql injection
SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the infohash parameter...
CVE-2008-6418
SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the infohash parameter...
CVE-2008-6418
TorrentTrader’s scrape.php is vulnerable to SQL injection via the info_hash parameter for versions before 2008-05-13. Remote attackers could execute arbitrary SQL commands. Public references confirm the issue; no exploit details are provided in the connected documents. CVSS‑2.0 base score is 7.5 ...
CVE-2008-6418: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the infohash parameter...
CVE-2008-4494
SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-4494
CVE-2008-4494 is a SQL injection vulnerability affecting TorrentTrader Classic 1.08, 1.04, and earlier, in the completed-advance.php script. The flaw allows remote attackers to execute arbitrary SQL commands by supplying input in the id parameter. The issue originates from improper handling of th...