Rivetcode

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-4996 Sep 19, 19:55 HIGH POC This Week

Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Rivettracker Rivetcode

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

0.7%

CVE-2012-4993 Sep 19, 19:55 HIGH POC This Week

torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Privilege Escalation Rivettracker Rivetcode

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

6.3%

CVE-2012-4996

EPSS 1% CVSS 7.5

HIGH POC This Week

PHP SQLi Rivettracker +1

NVD Exploit-DB

CVE-2012-4993

EPSS 6% CVSS 7.5

HIGH POC This Week

PHP Privilege Escalation Rivettracker +1

NVD Exploit-DB