rivetcode records

3 published records for vendor rivetcode.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2012-4993Proof of concept	torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecifirivetcode · rivettracker · CWE-264 Pre-auth	High7.5	—	2.3%	Sep 19, 2012
30Monitor	CVE-2012-4996Proof of concept	Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hasrivetcode · rivettracker · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.2%	Sep 19, 2012
8Monitor	CVE-2008-7207No exploit	RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.rivetcode · rivettracker · CWE-310	Low2.1	—	0.3%	Sep 11, 2009

CVE-2012-4993
31Monitor
torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecifi
HighCVSS 7.5Proof of conceptEPSS 2%
- Pre-auth
rivetcode · rivettrackerSep 19, 2012
CVE-2012-4996
30Monitor
Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the has
HighCVSS 7.5Proof of conceptEPSS 1%
- pre-auth RCE
- SQL injection
rivetcode · rivettrackerSep 19, 2012
CVE-2008-7207
8Monitor
RivetTracker before 1.0 stores passwords in cleartext in config.php, which allows local users to discover passwords by reading config.php.
LowCVSS 2.1No exploitEPSS 0%
rivetcode · rivettrackerSep 11, 2009