Rivettracker

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-4996 HIGH POC This Week

Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Rivettracker

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

0.7%

CVE-2012-4993 HIGH POC This Week

torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Privilege Escalation Rivettracker

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

6.3%

CVE-2012-4996

EPSS 1% CVSS 7.5

HIGH POC This Week

PHP SQLi Rivettracker

NVD Exploit-DB

CVE-2012-4993

EPSS 6% CVSS 7.5

HIGH POC This Week

PHP Privilege Escalation Rivettracker

NVD Exploit-DB