Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) wantusername parameter to account-signup.php, or the (3) receiver parameter to account-inbox.php in a msg action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TorrentTrader account-signup.php 多个SQL注入漏洞
Vulnerability Description
TorrentTrader是用PHP编写的torrent tracker平台。 TorrentTrader的account-signup.php文件中没有正确地验证对email和wantusername参数的输入，远程攻击者可以通过SQL注入攻击检索管理员口令哈希。成功利用这个漏洞要求禁用了magic_quotes_gpc且站点没有配置为invite-only。 当设置了msg的时候，TorrentTrader的account-inbox.php文件中没有正确地验证对receiver参数的输入，允许远程攻
CVSS Information
N/A
Vulnerability Type
N/A