116 matches found
CVE-2008-4494: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
torrenttrader-blindsql.txt
====================================================== == TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org ====================================================== == AuThOr : BazOka-HaCkEr == EmaiL : [email protected] == HomE : WwW.TrYaG.cc/cc...
TorrentTrader Classic <= 1.04 Blind SQL Injection Vulnerability
Exploit for unknown platform in category web applications =============================================================== TorrentTrader Classic TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org...
TorrentTrader Classic 1.04 - Blind SQL Injection
TorrentTrader Classic 1.04 - Blind SQL Injection ====================================================== == TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org ====================================================== == AuThOr : BazOka-HaCkEr ==...
TorrentTrader Classic <= 1.04 Blind SQL Injection Vulnerability
No description provided by source. ====================================================== == TorrentTrader Classic = 1.04 Blind SQL Injection Exploit ====================================================== == NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org...
TorrentTrader Classic 1.04 - Blind SQL Injection
====================================================== == TorrentTrader Classic NamE : TorrentTrader Classic == version : 1.04 == Download : www.torrenttrader.org ====================================================== == AuThOr : BazOka-HaCkEr == EmaiL : [email protected] == HomE : WwW.TrYaG.cc/cc...
TorrentTrader多个SQL注入漏洞
BUGTRAQ ID: 29787 CVECAN ID: CVE-2008-2428 TorrentTrader是用PHP编写的torrent tracker平台。 TorrentTrader的account-signup.php文件中没有正确地验证对email和wantusername参数的输入，远程攻击者可以通过SQL注入攻击检索管理员口令哈希。成功利用这个漏洞要求禁用了magicquotesgpc且站点没有配置为invite-only。...
Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities
====================================================================== Secunia Research 18/06/2008 - TorrentTrader Multiple SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...
CVE-2008-2428
Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 wantusername parameter to account-signup.php, or the 3 receiver parameter to account-inbox.php in a msg action...
Sql injection
Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 wantusername parameter to account-signup.php, or the 3 receiver parameter to account-inbox.php in a msg action...
CVE-2008-2428
Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 wantusername parameter to account-signup.php, or the 3 receiver parameter to account-inbox.php in a msg action...
CVE-2008-2428
TorrentTrader 1.08 Classic is affected by multiple SQL injection vulnerabilities in the PHP/MySQL-based TorrentTrader platform. Specifically, unsanitized input in account-signup.php (parameters email and wantusername) and in account-inbox.php (parameter receiver when msg is set) allows remote SQL...
CVE-2008-2428: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 wantusername parameter to account-signup.php, or the 3 receiver parameter to account-inbox.php in a msg action...
TorrentTrader scrape.php脚本SQL注入漏洞
BUGTRAQ ID: 29451 TorrentTrader是用PHP编写的torrent tracker平台。 TorrentTrader在验证访问IP列表时存在SQL漏洞，远程攻击者可能利用此漏洞绕过访问限制。 如果要下载受限制的torrent，用户要登录到TorrentTrader，然后其IP储存在许可用户的列表中。当bittorrent客户端连接时，会检查这个IP地址是否为许可用户列表中的地址。...
TorrentTrader Classic 1.x - scrape.php SQL Injection
TorrentTrader Classic 1.x - scrape.php SQL Injection source: https://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages...
CVE-2008-1172
Cross-site request forgery CSRF vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages...
CVE-2008-1173
Cross-site scripting XSS vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-1172
CVE-2008-1172 describes a Cross-site request forgery (CSRF) vulnerability in the file account-inbox.php of TorrentTrader Classic 1.08. The issue allows remote attackers to perform certain actions as other users, demonstrated by sending messages. This vulnerability arises in the context of the aff...
CVE-2008-1173: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...