EUVD-2006-6954

Malware in sbrugna...

BtitTracker 1.4 XSS

BtitTracker 1.4 xss Some fields are not sanitized for bad chars or words like javascript. =email field= When new user is registered you can put whatever you want and after that when still in mode "validating" you can change your email to something like "plaintext the field is 30 chars long so it ...

CVE-2006-6972

SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 by and 2 order parameters. NOTE: it is not clear whether this issue is exploitable...

CVE-2006-6972

CVE-2006-6972 involves a SQL injection in torrents.php of BtitTracker (version 1.3.2 and earlier). The vulnerability arises when the (1) by and (2) order parameters are unsafely processed, enabling remote attackers to craft SQL commands that may be executed by the database. Affected software: Bti...

CVE-2006-6972

SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 by and 2 order parameters. NOTE: it is not clear whether this issue is exploitable...