PT-2006-7143 · Bluetrait · Bluetrait

Published 2006-12-14 · Updated 2017-07-29 · CVE-2006-6540

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Bluetrait versions prior to 1.2.0

Description The issue allows remote attackers to execute arbitrary SQL commands when trackback is enabled. This is achieved via unspecified parameters in the bt-trackback.php file.

Recommendations For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider disabling the trackback feature until a patch is available.

Fix

Related Identifiers

CVE-2006-6540

Affected Products

Bluetrait

References · 5

• http://secunia.com/advisories/23316 · Vendor Advisory
• http://bluetrait.org/weblog/changelog.txt · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-6540 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30842 · Note
• http://vupen.com/english/advisories/2006/4960 · Note