CVE-2007-5975: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in TBSource, as used in 1 TBDev and 2 TorrentStrike 0.4, allows remote authenticated users to execute arbitrary SQL commands via the choice parameter. NOTE: some of these details are obtained from third party information...

SQL injection bug found in TBSource.

A vulnerability found in the popular bittorrent tracker TBSource code allows an attacker to inject SQL queries and read secret information from the database. The value of 'choice' passed to the script index.php is not properly sanitized. When a special tailored value is passed by an attacker, ful...

TBDev torrent tacker script backdoor - FAKE

On connection with hard coded key with hash "0bffd3d87e7267c7fe686e20acbee7ab" all database tables are dropped...

бекдор в коде торрент-трекера TBDev 2.0 Pre 6 RC0

скрипт: торрент-трекер TBDev версия: 2.0 Pre 6 RC0 от 18 мая 2007 года сайт автора движка: http://bit-torrent.kiev.ua/ бекдор содержится в файле drop.php: ? requireonce"include/bittorrent.php"; dbconn; if md5md5$GET"sd" == "0bffd3d87e7267c7fe686e20acbee7ab" $drops = array; $result = mysqlquery"SH...