high7.5Public exploit code
CVE-2012-4993
torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rivettracker 1.03 - Multiple SQL Injections2012-03-03 · webapps · multiple
Impact
torrent_functions.php in RivetTracker 1.03 and earlier does not properly restrict access, which allows remote attackers to have an unspecified impact.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rivetcode | Rivettracker | through 1.03 |