EUVD-2008-6388

Malware in sbrugna...

BtiTracker <= 1.4.7, xbtit <= 2.0.542 SQL Injection Vulnerability

No description provided by source. BtiTracker/xBtiTracker Remote SQL Injection Vulnerability Author: InATeam http://inattack.ru/ Affected versions: BtiTracker = 1.4.7, xBtiTracker = 2.0.542 Software site: http://www.btiteam.org/...

TorrentTrader Classic 1.x - 'scrape.php' SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29451/info TorrentTrader Classic is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

CVE-2008-6418

SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the infohash parameter...

CVE-2008-6418

TorrentTrader’s scrape.php is vulnerable to SQL injection via the info_hash parameter for versions before 2008-05-13. Remote attackers could execute arbitrary SQL commands. Public references confirm the issue; no exploit details are provided in the connected documents. CVSS‑2.0 base score is 7.5 ...

CVE-2008-6418: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the infohash parameter...

CVE-2008-3784: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows remote attackers to execute arbitrary SQL commands via the infohash parameter...

TorrentTrader scrape.php脚本SQL注入漏洞

BUGTRAQ ID: 29451 TorrentTrader是用PHP编写的torrent tracker平台。 TorrentTrader在验证访问IP列表时存在SQL漏洞，远程攻击者可能利用此漏洞绕过访问限制。 如果要下载受限制的torrent，用户要登录到TorrentTrader，然后其IP储存在许可用户的列表中。当bittorrent客户端连接时，会检查这个IP地址是否为许可用户列表中的地址。...

torrenttrader-sql.txt

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier Discovered by: Charles Vaughn [email protected] Software: http://sourceforge.net/projects/torrenttrader Status: Vendor Notified, updated version available Vulnerability TorrentTrader is a popular torrent...

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier

SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier Discovered by: Charles Vaughn [email protected] Software: http://sourceforge.net/projects/torrenttrader Status: Vendor Notified, updated version available Vulnerability TorrentTrader is a popular torrent...