45 matches found
CVE-2012-10002: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in ahmyi RivetTracker. It has been declared as problematic. Affected by this vulnerability is the function changeColor of the file css.php. The manipulation of the argument setcss leads to cross site scripting. The attack can be launched remotely. The patch is named...
PT-2023-9939 · Unknown · Ahmyi Rivettracker
Name of the Vulnerable Software and Affected Versions: ahmyi RivetTracker affected versions not specified Description: A vulnerability was found in ahmyi RivetTracker, affecting the function changeColor of the file css.php. The manipulation of the argument set css leads to cross-site scripting. T...
PT-2023-9940 · Unknown · Ahmyi Rivettracker
Name of the Vulnerable Software and Affected Versions: ahmyi RivetTracker affected versions not specified Description: A problematic issue has been found in ahmyi RivetTracker, affecting some unknown processing. The manipulation of the argument $ SERVER'PHP SELF' leads to cross site scripting. Th...
CVE-2012-10003: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in ahmyi RivetTracker. This issue affects some unknown processing. The manipulation of the argument $SERVER'PHPSELF' leads to cross site scripting. The attack may be initiated remotely. The patch is named...
Rivettracker <= 1.03 - Multiple SQL injection
No description provided by source. Exploit Title: Multiple SQL injections in rivettracker =1.03 Date: 2/3/2012 Author: Ali Raheem Software Link: http://www.rivetcode.com/software/rivettracker/ Version: =1.03 Tested on: Linux guruplug-debian 3.1.7 2 PREEMPT Tue Jan 3 20:19:54 MST 2012 armv5tel...
RivetTracker multiple SQL injection vulnerabilities-vulnerability warning-the black bar safety net
Affected system: rivettracker rivettracker =1.03 Description: -------------------------------------------------------------------------------- BUGTRAQ ID: 5 2 2 8 3 CVE ID: CVE-2 0 1 2-4 9 9 6 RivetTracker is PHPBTTracker the revised version by"DeHackEd"with PHP, using MySQL as the database...
CVE-2012-4993
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
CVE-2012-4996
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
Code injection
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
Sql injection
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4996
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4993
CVE-2012-4993 affects RivetTracker 1.03 and earlier. The vulnerability arises from torrent_functions.php failing to properly restrict access, enabling remote attackers to cause an unspecified impact. Exploit details are not provided in the documents beyond the linked exploit-db item; no remediati...
CVE-2012-4993
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
CVE-2012-4996
Summary (CVE-2012-4996) : RivetTracker 1.03 and earlier is affected by multiple SQL injection vulnerabilities in the hash parameter of the pages dltorrent.php and torrent_functions.php. The underlying issue enables remote attackers to craft inputs that could lead to arbitrary SQL execution, compr...
CVE-2012-4996: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to 1 dltorrent.php or 2 torrentfunctions.php...
CVE-2012-4993: Undefined Security Weakness
torrentfunctions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact...
Multiple SQL injections in rivettracker <=1.03
Exploit Title: Multiple SQL injections in rivettracker =1.03 Date: 2/3/2012 Author: Ali Raheem Software Link: http://www.rivetcode.com/software/rivettracker/ Version: =1.03 Tested on: Linux guruplug-debian 3.1.7 2 PREEMPT Tue Jan 3 20:19:54 MST 2012 armv5tel GNU/Linux Greets: spyware, dividead...
Rivettracker 1.03 SQL Injection
Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords...
Rivettracker 1.03 - Multiple SQL Injections
Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames for admin, user and mysql database. Other fil...
rivettracker <=1.03 Multiple SQL injection
Exploit for php platform in category web applications Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contai...