EUVD-2006-6003

Malware in sbrugna...

EUVD-2004-1209

Malware in sbrugna...

Blog Torrent 0.80 BTDownload.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11839/info It is reported that Blog Torrent is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a...

Blog Torrent 0.8 - Remote Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11795/info It is reported that Blog Torrent is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied input. Blog Torrent preview 0.8...

CVE-2006-6020

Cross-site scripting XSS vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter...

CVE-2006-6020

CVE-2006-6020 is an XSS vulnerability in announce.php of Blog Torrent Preview 0.92, exploitable via the left parameter to inject script/HTML. The NVD entry lists a CVSS v2 base score of 6.8 (MEDIUM) with network attack vector and no authentication, affecting confidentiality, integrity, and availa...

[UNIX] Blog Torrent Remote User and Password Disclosure

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-2229

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the 1 data or 2 torrents directories with insufficient access control, which allows remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers...

CVE-2005-2229

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the 1 data or 2 torrents directories with insufficient access control, which allows remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers...

CVE-2005-2229

Blog Torrent 0.92 and earlier stores sensitive files under the web document root (in the data or torrents directories) with insufficient access control, enabling remote bidders to obtain sensitive information such as account names and password hashes (e.g., via data/newusers). Affected software: ...

CVE-2004-1212

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. dot dot in the file argument...

CVE-2004-1212

Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. dot dot in the file argument...

CVE-2004-1212

The CVE-2004-1212 entry describes a directory traversal vulnerability in Blog Torrent Preview 0.8, specifically in btdownload.php. An attacker can use a .. sequence in the file parameter to download arbitrary files from the affected server. The issue is exploitable remotely (no authentication req...

Blog Torrent 0.80 - BTDownload.php Cross-Site Scripting

Blog Torrent 0.80 - BTDownload.php Cross-Site Scripting source: https://www.securityfocus.com/bid/11839/info It is reported that Blog Torrent is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This...

Blog Torrent < 0.81 btdownload.php Multiple Vulnerabilities

There is a remote directory traversal vulnerability in Blog Torrent, a web-based application that allows users to host files for Bit Torrents. There is a cross-site scripting issue in the remote version of this software that may allow an attacker to set up attacks against third parties by using t...

Blog Torrent btdownload.php file Variable Traversal Arbitrary File Retrieval

There is a remote directory traversal vulnerability in log Torrent, a web-based application that allows users to host files for Bit Torrents. A malicious user can leverage this issue by requesting files outside of the web server root directory with directory traversal strings such as '../'. This...

Blog Torrent 0.8 - Directory Traversal

Blog Torrent 0.8 - Directory Traversal source: https://www.securityfocus.com/bid/11795/info It is reported that Blog Torrent is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied input. Blog Torrent preview 0....

Blog Torrent preview 0.8 - arbitary file download

Intro ----- Blogtorrent is a collection of PHP scripts which are designed to make it simple to host files for transfer via bittorrent. Whilst it is not normal to report security problems in "preview" releases of software this software was covered prominently upon Slashdot and could be widely used...

Blog Torrent 0.8 - Directory Traversal

source: https://www.securityfocus.com/bid/11795/info It is reported that Blog Torrent is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied input. Blog Torrent preview 0.8 version is affected by this...