Vulnerability Details CVE-2006-4238
SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter in category mode.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.8%
CVSS Severity
CVSS v2 Score 7.5
Products affected by CVE-2006-4238
-
cpe:2.3:a:wtcom:web_torrent:*
-
cpe:2.3:a:wtcom:web_torrent:0.1_alpha
-
cpe:2.3:a:wtcom:web_torrent:0.2.1_alpha
-
cpe:2.3:a:wtcom:web_torrent:0.2.2_alpha
-
cpe:2.3:a:wtcom:web_torrent:0.2.3_alpha
-
cpe:2.3:a:wtcom:web_torrent:0.2_alpha