CVE-2012-4996 Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.ph...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rivetcode rivettracker | <= 1.03 | No fix listed |
| rivetcode rivettracker | = 0.1 | No fix listed |
| rivetcode rivettracker | = 0.8 | No fix listed |