CVE-2008-7207

CVE-2008-7207 involves RivetTracker before 1.0, where passwords are stored in cleartext in config.php. The underlying issue is cleartext credential storage, enabling local users to read passwords by accessing config.php. Exploitation details are not provided in the documents, and there is no expl...

CVE-2012-4993

CVE-2012-4993 affects RivetTracker 1.03 and earlier. The vulnerability arises from torrent_functions.php failing to properly restrict access, enabling remote attackers to cause an unspecified impact. Exploit details are not provided in the documents beyond the linked exploit-db item; no remediati...

CVE-2012-4996

Summary (CVE-2012-4996) : RivetTracker 1.03 and earlier is affected by multiple SQL injection vulnerabilities in the hash parameter of the pages dltorrent.php and torrent_functions.php. The underlying issue enables remote attackers to craft inputs that could lead to arbitrary SQL execution, compr...