CVE-2017-17713

Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter.

• CWE-89

• https://github.com/boxug/trape/commit/628149159ba25adbfc29a3ae1d4b10c7eb936dd3Issue Tracking, Patch, Third Party Advisory
• https://www.seekurity.com/blog/general/cve-2017-17713-and-cve-2017-17714-multiple-sql-injections-and-xss-vulnerabilities-found-in-the-hackers-tracking-tool-trape-boxug/Exploit, Issue Tracking, Patch, Third Party Advisory
• https://www.youtube.com/watch?v=RWw1UTeZee8Exploit, Issue Tracking, Third Party Advisory
• https://www.youtube.com/watch?v=Txp6IwR24jYExploit, Issue Tracking, Third Party Advisory
• https://www.youtube.com/watch?v=efmvL235S-8Exploit, Issue Tracking, Third Party Advisory
• https://github.com/boxug/trape/commit/628149159ba25adbfc29a3ae1d4b10c7eb936dd3Issue Tracking, Patch, Third Party Advisory
• https://www.seekurity.com/blog/general/cve-2017-17713-and-cve-2017-17714-multiple-sql-injections-and-xss-vulnerabilities-found-in-the-hackers-tracking-tool-trape-boxug/Exploit, Issue Tracking, Patch, Third Party Advisory
• https://www.youtube.com/watch?v=RWw1UTeZee8Exploit, Issue Tracking, Third Party Advisory
• https://www.youtube.com/watch?v=Txp6IwR24jYExploit, Issue Tracking, Third Party Advisory
• https://www.youtube.com/watch?v=efmvL235S-8Exploit, Issue Tracking, Third Party Advisory

Published

Dec 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17701K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL …
• CVE-2017-17703Synacor Zimbra Collaboration Suite (ZCS) before 8.8.3 has Pe…
• CVE-2017-17704A door-unlocking issue was discovered on Software House iSta…
• CVE-2017-17707Due to missing authorization checks, any authenticated user …
• CVE-2017-17708Because of insufficient authorization checks it is possible …
• CVE-2017-17712The raw_sendmsg() function in net/ipv4/raw.c in the Linux ke…7
• CVE-2017-17714Trape before 2017-11-05 has XSS via the /nr red parameter, t…
• CVE-2017-17715The saveFile method in MediaController.java in the Telegram …
• CVE-2017-17716GitLab 9.4.x before 9.4.2 does not support LDAP SSL certific…
• CVE-2017-17717Sonatype Nexus Repository Manager through 2.14.5 has weak pa…
• CVE-2017-17718The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has …
• CVE-2017-17719A cross-site scripting (XSS) vulnerability in the wp-concour…