Multiple SQL injection vulnerabilities in TorrentTrader before 1.07 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) account-inbox.php, (2) account-settings.php, and possibly (3) backend/functions.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Torrenttrader | Torrenttrader | * | 1.06 (including) |