NuytsTech Security

CVE-2008-2428

by ·

Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) wantusername parameter to account-signup.php, or the (3) receiver parameter to account-inbox.php in a msg action.

Date published : 2008-06-18

http://www.securityfocus.com/bid/29787

http://www.securityfocus.com/archive/1/493434/100/0/threaded

Tags: