CVE-2008-3784 SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows remote attackers to execute arbitrary SQL commands via the info_hash parameter.
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows remote attackers to execute arbitrary SQL commands via the info_hash parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| btitracker project btitracker | <= 1.4.7 | No fix listed |
| xbtitracker project xbtitracker | <= 2.0.542 | No fix listed |
References
- 31556 third-party-advisory
- 4186 third-party-advisory
- www.btiteam.org broken-link
- www.btiteam.org broken-link
- 30811 exploit third-party-advisory vdb-entry
- btitracker-xbtit-scrape-sql-injection(44627) third-party-advisory vdb-entry
- 6296 exploit third-party-advisory vdb-entry