Skip to content
Noroxi

bti-tracker records

5 published records for vendor bti-tracker.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2007-5988
      30Monitor

      blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbit

      HighCVSS 7.5No exploitEPSS 1%

      bti-tracker · bti-trackerNov 14, 2007

    • CVE-2007-2854
      30Monitor

      Multiple SQL injection vulnerabilities in account_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQL

      HighCVSS 7.5Proof of conceptEPSS 1%

      bti-tracker · bti-trackerMay 24, 2007

    • CVE-2007-5987
      27Monitor

      details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms

      MediumCVSS 6.8No exploitEPSS 1%

      bti-tracker · bti-trackerNov 14, 2007

    • CVE-2006-7159
      25Monitor

      Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbi

      MediumCVSS 6.4No exploitEPSS 1%

      bti-tracker · bti-trackerMar 7, 2007

    • CVE-2007-5985
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTML

      MediumCVSS 4.3No exploitEPSS 1%

      bti-tracker · bti-trackerNov 14, 2007