CVE-2012-4996

Multiple SQL injection vulnerabilities in RivetTracker 1.03 and earlier allow remote attackers to execute arbitrary SQL commands via the hash parameter to (1) dltorrent.php or (2) torrent_functions.php.

Date published : 2012-09-19

http://www.securityfocus.com/bid/52283

http://www.exploit-db.com/exploits/18553