Torrenttrader Security Vulnerabilities and Issues — Torrenttrader CVE List

Lucene search

TorrenttraderTorrenttrader

9 matches found

CVE•added 2007/10/09 9:17 p.m.•44 views

CVE-2007-5312

Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web script or HTML via the (1) color parameter to pjirc/css.php and the (2) cat parameter to browse.php.

4.3CVSS5.7AI score0.07499EPSS

CVE•added 2008/10/09 12:0 a.m.•38 views

CVE-2008-4494

SQL injection vulnerability in completed-advance.php in TorrentTrader Classic 1.08 and 1.04 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

7.5CVSS8.4AI score0.00202EPSS

CVE•added 2009/03/06 6:30 p.m.•37 views

CVE-2008-6418

SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the info_hash parameter.

7.5CVSS8.7AI score0.00279EPSS

CVE•added 2007/08/20 10:17 p.m.•36 views

CVE-2007-4435

Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php.

7.5CVSS8.7AI score0.009EPSS

CVE•added 2008/03/06 12:44 a.m.•35 views

CVE-2008-1173

Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

4.3CVSS5.7AI score0.00399EPSS

CVE•added 2007/10/09 9:17 p.m.•34 views

CVE-2007-5311

Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the ss_uri parameter.

7.5CVSS7.1AI score0.06267EPSS

CVE•added 2007/08/25 12:17 a.m.•33 views

CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying (1) disclaimer.txt, (2) sponsors.txt, and (3) banners.txt, which are used in an include call. NOTE: there might be local attack vectors that ex...

4.6CVSS7.3AI score0.00059EPSS

CVE•added 2007/09/12 7:17 p.m.•31 views

CVE-2007-4831

Multiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07 allow remote attackers to inject arbitrary web script or HTML via the (1) avatar and (2) title parameters.

2.6CVSS5.8AI score0.00329EPSS

CVE•added 2008/03/06 12:44 a.m.•29 views

CVE-2008-1172

Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform certain actions as other users, as demonstrated by sending messages.

4.3CVSS7.1AI score0.00129EPSS