CVE-2006-6972

CVE-2006-6972 involves a SQL injection in torrents.php of BtitTracker (version 1.3.2 and earlier). The vulnerability arises when the (1) by and (2) order parameters are unsafely processed, enabling remote attackers to craft SQL commands that may be executed by the database. Affected software: Bti...