Bazoka-Hacker

**Name of the Vulnerable Software and Affected Versions** Shahrood (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the `id` parameter in the 'ndetail.php' endpoint. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: TorrentTrader Classic versions 1.08 and 1.04 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the completed-advance.php file. Recommendations: For TorrentTrader Classic versions 1.08 and 1.04 and earlier, avoid using the `id` parameter in the completed-advance.php file until a fix is available. Consider restricting access to the completed-advance.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.