CVE-2006-6972

SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 by and 2 order parameters. NOTE: it is not clear whether this issue is exploitable...

CVE-2006-6972

SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 by and 2 order parameters. NOTE: it is not clear whether this issue is exploitable...

CVE-2006-6972

CVE-2006-6972 involves a SQL injection in torrents.php of BtitTracker (version 1.3.2 and earlier). The vulnerability arises when the (1) by and (2) order parameters are unsafely processed, enabling remote attackers to craft SQL commands that may be executed by the database. Affected software: Bti...