PT-2009-1890 · Torrenttrader · Torrenttrader

Publicado 2009-03-06 · Atualizado 2018-10-11 · CVE-2008-6418

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: TorrentTrader versions prior to 2008-05-13

Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the info hash parameter in the "scrape.php" file.

Recommendations: For versions prior to 2008-05-13, update to a version released after 2008-05-13 to resolve the issue. As a temporary workaround, consider restricting access to the scrape.php file or avoiding the use of the info hash parameter until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2008-6418

Produtos afetados

Torrenttrader

Referências · 8

• 🔥 http://securityfocus.com/bid/29451 · Exploit
• 🔥 https://exploit-db.com/exploits/31866 · Exploit
• http://secunia.com/advisories/30480 · Aviso do Fabricante
• http://osvdb.org/45858 · Nota
• http://sourceforge.net/project/shownotes.php?group_id=98584&release_id=545219 · Correção
• http://securityfocus.com/archive/1/492878/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42785 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6418 · Nota de Segurança