bti-tracker kayıtları
bti-tracker üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-255 Credentials Management Errors1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
30İzleyin | CVE-2007-5988İstismar yok | blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbitbti-tracker · bti-tracker · CWE-255 | Yüksek7,5 | — | %1,5 | 14 Kas 2007 |
30İzleyin | CVE-2007-2854Kavram kanıtı | Multiple SQL injection vulnerabilities in account_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQLbti-tracker · bti-tracker | Yüksek7,5 | — | %1,2 | 24 May 2007 |
27İzleyin | CVE-2007-5987İstismar yok | details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanismsbti-tracker · bti-tracker · CWE-264 | Orta6,8 | — | %1,3 | 14 Kas 2007 |
25İzleyin | CVE-2006-7159İstismar yok | Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbibti-tracker · bti-tracker | Orta6,4 | — | %1,5 | 7 Mar 2007 |
18İzleyin | CVE-2007-5985İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTMLbti-tracker · bti-tracker · CWE-79 | Orta4,3 | — | %1,7 | 14 Kas 2007 |
- CVE-2007-598830İzleyin
blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbit
YüksekCVSS 7,5İstismar yokEPSS %2bti-tracker · bti-tracker14 Kas 2007
- CVE-2007-285430İzleyin
Multiple SQL injection vulnerabilities in account_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQL
YüksekCVSS 7,5Kavram kanıtıEPSS %1bti-tracker · bti-tracker24 May 2007
- CVE-2007-598727İzleyin
details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms
OrtaCVSS 6,8İstismar yokEPSS %1bti-tracker · bti-tracker14 Kas 2007
- CVE-2006-715925İzleyin
Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbi
OrtaCVSS 6,4İstismar yokEPSS %1bti-tracker · bti-tracker7 Mar 2007
- CVE-2007-598518İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTML
OrtaCVSS 4,3İstismar yokEPSS %2bti-tracker · bti-tracker14 Kas 2007