CVE-2019-13488

A cross-site scripting XSS vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend method is used...

Sql injection

Trape through 2019-05-08 has SQL injection via the data2 variable in core/db.py, as demonstrated by the /bs t parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend method is used...

CVE-2019-13489

Trape through 2019-05-08 has SQL injection via the data2 variable in core/db.py, as demonstrated by the /bs t parameter...

CVE-2019-13489

Trape (up to 2019-05-08) contains an SQL injection in the data[2] variable handled by core/db.py, allowing potentially arbitrary SQL execution. The root cause cited (CNVD) is lack of validation of externally entered SQL statements in database-based applications. No remediation details are provide...

CVE-2019-13488

A cross-site scripting XSS vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend method is used...

CVE-2019-13488

CVE-2019-13488 affects Trape up to 2019-05-08, with an XSS in static/js/trape.js. The vulnerability allows remote injection of script/HTML via the country, query, or refer parameters to the /register URI because the jQuery prepend() method is used without proper sanitization. Affected component/f...

PT-2019-13365

Name of the Vulnerable Software and Affected Versions Trape through 2019-05-08 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the "/register" URI, due to the use of the jQuery prepend method...

CVE-2019-13488: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in static/js/trape.js in Trape through 2019-05-08 allows remote attackers to inject arbitrary web script or HTML via the country, query, or refer parameter to the /register URI, because the jQuery prepend method is used...

PT-2019-13366

Name of the Vulnerable Software and Affected Versions Trape through 2019-05-08 Description The issue is related to SQL injection via the data2 variable in core/db.py. This can be demonstrated by the "/bs t" parameter, which is an API endpoint. Recommendations For versions through 2019-05-08,...

Track People on the Internet: trape

Trape is a OSINT analysis and research tool, which allows people to track and execute intelligent social engineering attacks in real time. It was created with the aim of teaching the world how large Internet companies could obtain confidential information such as the status of sessions of their...

Trape SQL Injection Vulnerability

Trape is a set of open source Internet tracking and identification tools. It is capable of remotely identifying sessions and simulating phishing attacks. A SQL injection vulnerability exists in versions of Trape prior to 2017-11-05. A remote attacker can exploit the vulnerability to execute SQL...

Trape Cross-Site Scripting Vulnerability

Trape is a set of open source Internet tracking and identification tools. It is capable of remotely identifying sessions and simulating phishing attacks. A cross-site scripting vulnerability exists in versions of Trape prior to 2017-11-05. A remote attacker can exploit the vulnerability to inject...

CVE-2017-17714

Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon...

Sql injection

Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the...

Design/Logic Flaw

Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon...

CVE-2017-17713

Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the...

CVE-2017-17714

Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon...

CVE-2017-17713

Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the...

CVE-2017-17713

Summary: CVE-2017-17713 and CVE-2017-17714 pertain to Trape, an open-source internet tracking/identification tool, with concrete issues reported in connected documents. For CVE-2017-17713, Trape prior to 2017-11-05 is vulnerable to SQL injection via multiple parameters and headers, including /nr ...