CVE-2007-5975 SQL injection vulnerability in index.php in TBSource, as used in (1) TBDev and (2) TorrentStrike 0.4, allows remote authenticated users to execute arbitrary SQL commands via the choice parameter. NOTE...
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in TBSource, as used in (1) TBDev and (2) TorrentStrike 0.4, allows remote authenticated users to execute arbitrary SQL commands via the choice parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| torrentstrike | = 0.4 | No fix listed |
References
- 20071109 SQL injection bug found in TBSource mailing-list
- 38667 vdb-entry
- 27566 third-party-advisory vendor-advisory
- 20071109 SQL injection bug found in TBSource. mailing-list
- 26415 vdb-entry
- tbsource-index-sql-injection(38402) vdb-entry