CVE-2006-4238

Published: Aug 21, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter in category mode.

Affected (6)

Products: Wtcom: Web Torrent

Wtcom

1 product

Web Torrent

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Wtcom Web Torrent	version ≤ 0.2.4_alpha
Wtcom Web Torrent	Version 0.1_alpha
Wtcom Web Torrent	Version 0.2.1_alpha
Wtcom Web Torrent	Version 0.2.2_alpha
Wtcom Web Torrent	Version 0.2.3_alpha
Wtcom Web Torrent	Version 0.2_alpha

References (6)

http://www.securityfocus.com/bid/19569

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/28426

Source: cve@mitre.org

https://www.exploit-db.com/exploits/2200

Source: cve@mitre.org

http://www.securityfocus.com/bid/19569

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/28426

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/2200

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.