Read the docs
TI-2006-06285 Aliases CVE-2006-6540GHSA-5fgj-5rwg-9qgp

SQL injection vulnerability in bt-trackback.php in Bluetrait before 1.2.0, when trackback…

Priority LOW 32Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

SQL injection vulnerability in bt-trackback.php in Bluetrait before 1.2.0, when trackback is enabled, allows remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: some of these details are obtained from third party information.

Why it matters now

EPSS 0.01091 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:a:bluetrait:bluetrait:*:*:*:*:*:*:*:*up to 1.1.1VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.3.2:*:*:*:*:*:*:*0.3.2VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.3.3:*:*:*:*:*:*:*0.3.3VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.3.5:*:*:*:*:*:*:*0.3.5VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.3.6:*:*:*:*:*:*:*0.3.6VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.3.7:*:*:*:*:*:*:*0.3.7VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.3.8:*:*:*:*:*:*:*0.3.8VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.3.9:*:*:*:*:*:*:*0.3.9VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.3.10:*:*:*:*:*:*:*0.3.10VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4:*:*:*:*:*:*:*0.4VulnerableBluetrait
  • cpe:2.3:a:bluetrait:bluetrait:*:*:*:*:*:*:*:* Versions up to 1.1.1 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.3.2:*:*:*:*:*:*:* Versions 0.3.2 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.3.3:*:*:*:*:*:*:* Versions 0.3.3 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.3.5:*:*:*:*:*:*:* Versions 0.3.5 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.3.6:*:*:*:*:*:*:* Versions 0.3.6 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.3.7:*:*:*:*:*:*:* Versions 0.3.7 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.3.8:*:*:*:*:*:*:* Versions 0.3.8 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.3.9:*:*:*:*:*:*:* Versions 0.3.9 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.3.10:*:*:*:*:*:*:* Versions 0.3.10 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·Bluetrait
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:bluetrait:bluetrait:0.4.1:*:*:*:*:*:*:*0.4.1VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.2:*:*:*:*:*:*:*0.4.2VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.3:*:*:*:*:*:*:*0.4.3VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.4:*:*:*:*:*:*:*0.4.4VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.5:*:*:*:*:*:*:*0.4.5VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.6:*:*:*:*:*:*:*0.4.6VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.7:*:*:*:*:*:*:*0.4.7VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.8_beta1:*:*:*:*:*:*:*0.4.8_beta1VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.9:*:*:*:*:*:*:*0.4.9VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.4.10:*:*:*:*:*:*:*0.4.10VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.5.1:*:*:*:*:*:*:*0.5.1VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.5.2:*:*:*:*:*:*:*0.5.2VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.5.3:*:*:*:*:*:*:*0.5.3VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:0.5_beta2:*:*:*:*:*:*:*0.5_beta2VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableBluetrait
cpe:2.3:a:bluetrait:bluetrait:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableBluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.1:*:*:*:*:*:*:* Versions 0.4.1 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.2:*:*:*:*:*:*:* Versions 0.4.2 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.3:*:*:*:*:*:*:* Versions 0.4.3 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.4:*:*:*:*:*:*:* Versions 0.4.4 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.5:*:*:*:*:*:*:* Versions 0.4.5 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.6:*:*:*:*:*:*:* Versions 0.4.6 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.7:*:*:*:*:*:*:* Versions 0.4.7 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.8_beta1:*:*:*:*:*:*:* Versions 0.4.8_beta1 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.9:*:*:*:*:*:*:* Versions 0.4.9 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.4.10:*:*:*:*:*:*:* Versions 0.4.10 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.5.1:*:*:*:*:*:*:* Versions 0.5.1 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.5.2:*:*:*:*:*:*:* Versions 0.5.2 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.5.3:*:*:*:*:*:*:* Versions 0.5.3 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:0.5_beta2:*:*:*:*:*:*:* Versions 0.5_beta2 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Bluetrait
  • cpe:2.3:a:bluetrait:bluetrait:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Bluetrait

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-6540
  2. 2026-10-03 Alias added: GHSA-5fgj-5rwg-9qgp

References

Patch 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences