CVE-2007-2854

概要

参考情報

• osvdb.org/36316
• secunia.com/advisories/25382
• securityfocus.com/bid/24094 · Exploit
• vupen.com/english/advisories/2007/1921
• exchange.xforce.ibmcloud.com/vulnerabilities/34447
• exploit-db.com/exploits/3970

bti-tracker のその他の脆弱性

• CVE-2007-5988高 7.5blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shoutbox entries as arbit…
• CVE-2007-5987中 6.8details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass protection mechanisms…
• CVE-2007-5985中 4.3Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrary web script or HTML…
• CVE-2006-7159中 6.4Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbi…