Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2012-4996
Disclosure Date: September 19, 2012 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.php.
0
Attacker Value
Unknown
CVE-2008-7207
Disclosure Date: September 11, 2009 (last updated October 04, 2023)
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.
0