Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2008-3784

Disclosure Date: August 26, 2008 (last updated October 04, 2023)
SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows remote attackers to execute arbitrary SQL commands via the info_hash parameter.
0
0
Attacker Value
Unknown

CVE-2007-5986

Disclosure Date: November 15, 2007 (last updated October 04, 2023)
SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2006-7159

Disclosure Date: March 07, 2007 (last updated October 04, 2023)
Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.
0
0
Attacker Value
Unknown

CVE-2006-6972

Disclosure Date: February 07, 2007 (last updated October 04, 2023)
SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) by and (2) order parameters. NOTE: it is not clear whether this issue is exploitable.
0
0