EUVD-2004-2183

Malware in sbrugna...

EUVD-2004-2184

Malware in sbrugna...

EUVD-2004-2009

Malware in sbrugna...

CVE-2004-2191

CVE-2004-2191 describes a cross-site scripting (XSS) vulnerability in the ttt-webmaster.php component of Turbo Traffic Trader PHP 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through the parameters (1) msg[0] or (2) siteurl, potentially compromising user data or se...

CVE-2004-2192

CVE-2004-2192 concerns a SQL injection in Turbo Traffic Trader PHP 1.0, specifically in tttadmin/settings.php where the ttt_admin parameter enables remote attackers to execute arbitrary SQL commands. The vulnerability arises from improper handling of user-supplied input in the affected script, al...

CVE-2004-2192: Undefined Security Weakness

SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the tttadmin parameter...

CVE-2004-2191: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 msg0 or 2 siteurl parameters...

CVE-2004-2017

Multiple cross-site scripting XSS vulnerabilities in Turbo Traffic Trader C TTT-C 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via 1 the link parameter to ttt-out, 2 the X-Forwarded-For header in a GET request to ttt-in, 3 the Referer header in a GET request ...

CVE-2004-2017

CVE-2004-2017 covers multiple XSS vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0. Remote attackers can inject HTML/script via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header to ttt-in, (3) the Referer header to ttt-in, or (4) the site name and (5) site URL fields in the m...

CVE-2004-2017: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Turbo Traffic Trader C TTT-C 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via 1 the link parameter to ttt-out, 2 the X-Forwarded-For header in a GET request to ttt-in, 3 the Referer header in a GET request ...

CVE-2004-2017

Multiple cross-site scripting XSS vulnerabilities in Turbo Traffic Trader C TTT-C 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via 1 the link parameter to ttt-out, 2 the X-Forwarded-For header in a GET request to ttt-in, 3 the Referer header in a GET request ...

CVE-2004-2191

Cross-site scripting XSS vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the 1 msg0 or 2 siteurl parameters...

CVE-2004-2192

SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the tttadmin parameter...

turboTraffic.txt

+-----------------------------------------------------------------------+ | Turbo Traffic Trader Nitro v1.0 SQL Injection & XSS Proofs of Concept | | By aCiDBiTS [email protected] 10-Oct-2004 | +-----------------------------------------------------------------------+ Your web application needs a...

Multiple TTT-C XSS vulnerabilities

-------------------------------------------------------- Subject: Multiple TTT-C Turbo Traffic Trader C XSS vulnerabilityes. Author: Kaloyan Olegov Georgiev ICEFIRE Package name: Turbo Traffic Trader C TTT-C or TTT3 Sumary: Multiple XSS issues Date: 2004-05-16 Affected versions: Latest stable TTT...