Vulnerabilities

TI-2012-04222 CVE-2012-4996 · GHSA-28q2-r9rp-jg2h

Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote…

LOW 35

Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01236 Published 2012-09-19 No fix listed CWE-89

TI-2012-04219 CVE-2012-4993 · GHSA-jqpp-gxqw-fmwc

torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access…

LOW 37

torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02295 Published 2012-09-19 No fix listed CWE-264

TI-2008-06895 CVE-2008-7207 · GHSA-pr8c-fg5c-xwvc

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local…

LOW 11

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00287 Published 2009-09-11 No fix listed CWE-310

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote…

torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access…

RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local…