CVE-2008-2428

Publication date

2008-06-18 19:29:00

Family

flexera

State

PUBLISHED

Description

Multiple SQL injection vulnerabilities in TorrentTrader 1.08 Classic allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) wantusername parameter to account-signup.php, or the (3) receiver parameter to account-inbox.php in a msg action.