40 matches found
PT-2023-9940 · Unknown · Ahmyi Rivettracker
Name of the Vulnerable Software and Affected Versions: ahmyi RivetTracker affected versions not specified Description: A problematic issue has been found in ahmyi RivetTracker, affecting some unknown processing. The manipulation of the argument $ SERVER'PHP SELF' leads to cross site scripting. Th...
PT-2023-9939 · Unknown · Ahmyi Rivettracker
Name of the Vulnerable Software and Affected Versions: ahmyi RivetTracker affected versions not specified Description: A vulnerability was found in ahmyi RivetTracker, affecting the function changeColor of the file css.php. The manipulation of the argument set css leads to cross-site scripting. T...
Rivettracker <= 1.03 - Multiple SQL injection
No description provided by source. Exploit Title: Multiple SQL injections in rivettracker =1.03 Date: 2/3/2012 Author: Ali Raheem Software Link: http://www.rivetcode.com/software/rivettracker/ Version: =1.03 Tested on: Linux guruplug-debian 3.1.7 2 PREEMPT Tue Jan 3 20:19:54 MST 2012 armv5tel...
RivetTracker multiple SQL injection vulnerabilities-vulnerability warning-the black bar safety net
Affected system: rivettracker rivettracker =1.03 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 2 2 8 3 CVE ID: CVE-2 0 1 2-4 9 9 6 RivetTracker is PHPBTTracker the revised version by"DeHackEd"with PHP, using MySQL as the database...
CVE-2012-4996
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4993
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
Code injection
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
Sql injection
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4996
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4993
CVE-2012-4993 affects RivetTracker 1.03 and earlier. The vulnerability arises from torrent_functions.php failing to properly restrict access, enabling remote attackers to cause an unspecified impact. Exploit details are not provided in the documents beyond the linked exploit-db item; no remediati...
CVE-2012-4993
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
CVE-2012-4996
Summary (CVE-2012-4996) : RivetTracker 1.03 and earlier is affected by multiple SQL injection vulnerabilities in the hash parameter of the pages dltorrent.php and torrent_functions.php. The underlying issue enables remote attackers to craft inputs that could lead to arbitrary SQL execution, compr...
Multiple SQL injections in rivettracker <=1.03
Exploit Title: Multiple SQL injections in rivettracker =1.03 Date: 2/3/2012 Author: Ali Raheem Software Link: http://www.rivetcode.com/software/rivettracker/ Version: =1.03 Tested on: Linux guruplug-debian 3.1.7 2 PREEMPT Tue Jan 3 20:19:54 MST 2012 armv5tel GNU/Linux Greets: spyware, dividead...
Rivettracker 1.03 SQL Injection
Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords...
Rivettracker 1.03 - Multiple SQL Injections
Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames for admin, user and mysql database. Other fil...
rivettracker <=1.03 Multiple SQL injection
Exploit for php platform in category web applications Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contai...
Default credentials
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php...
CVE-2008-7207
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php...
CVE-2008-7207
CVE-2008-7207 involves RivetTracker before 1.0, where passwords are stored in cleartext in config.php. The underlying issue is cleartext credential storage, enabling local users to read passwords by accessing config.php. Exploitation details are not provided in the documents, and there is no expl...