CVE-2017-17713

Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the...

CVE-2017-17714

Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon...

CVE-2017-17714

CVE-2017-17714 affects Trape prior to 2017-11-05, where an XSS vulnerability exists via multiple input vectors. The issue arises from unsanitized user-controlled input across a long list of parameters and headers, including /nr red, /nr vId, /register (country, countryCode, cpu, isp, lat, lon, or...

CVE-2017-17713

Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the...

CVE-2017-17714

Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon...

PT-2017-14965

Name of the Vulnerable Software and Affected Versions Trape versions prior to 2017-11-05 Description The issue allows for XSS attacks through various parameters and HTTP headers, including the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country...

PT-2017-14964

Name of the Vulnerable Software and Affected Versions Trape versions prior to 2017-11-05 Description The issue allows for SQL injection through various parameters and HTTP headers, including the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, and several /register...