4 matches found
CVE-2024-44793
A cross-site scripting XSS vulnerability in the component /managers/multiplefreeleech.php of Gazelle commit 63b3370 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the torrents parameter...
Gazelle 安全漏洞
Gazelle is a web framework for private BitTorrent trackers from the individual developers at WhatCD. Gazelle has a security vulnerability that stems from a cross-site scripting vulnerability in the torrents parameter of the /managers/multiplefreeleech.php file...
PT-2024-31251 · Gazelle · Gazelle
Name of the Vulnerable Software and Affected Versions: Gazelle affected versions not specified Description: A cross-site scripting XSS vulnerability in the component "/managers/multiple freeleech.php" of Gazelle allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2017-7247
Multiple Cross-Site Scripting XSS were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data torrents, size passed to the 'Gazelle-master/sections/tools/managers/multiplefreeleech.php' URL. An attacker could execute arbitrary HTML...