-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| torrentpier/torrentpier | composer | <= 2.8.8 |
Miggo AIRoot Cause AnalysisThe security vulnerability is a classic SQL injection located in the modcp.php file of TorrentPier. The root cause is the failure to sanitize the topic_id parameter, which is read from the HTTP request. The value is directly embedded into a SQL query string. The provided patch, found in commit 6a0f6499d89fa5d6e2afa8ee53802a1ad11ece80, confirms this by changing the code to cast the topic_id to an integer. This action ensures that any non-numeric input is converted to a safe value, thereby preventing the injection of malicious SQL commands. The vulnerable code is not encapsulated within a specific function but is part of the main script execution of modcp.php. Therefore, a runtime profiler would indicate that the modcp.php script is the source of the vulnerable operation when the exploit is triggered.
A Semantic Attack on Google Gemini - Read the Latest Research