CVE-2006-6540

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-14 · updated 2026-06-16

Description

SQL injection vulnerability in bt-trackback.php in Bluetrait before 1.2.0, when trackback is enabled, allows remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: some of these details are obtained from third party information.

Affected products

Bluetrait: through 1.1.1; 0.3.2, 0.3.3, 0.3.5, 0.3.6, 0.3.7, 0.3.8 (+19)

References

http://secunia.com/advisories/23316
http://www.bluetrait.org/weblog/changelog.txt
http://www.vupen.com/english/advisories/2006/4960
https://exchange.xforce.ibmcloud.com/vulnerabilities/30842
http://secunia.com/advisories/23316
http://www.bluetrait.org/weblog/changelog.txt
http://www.vupen.com/english/advisories/2006/4960
https://exchange.xforce.ibmcloud.com/vulnerabilities/30842

Get alerted when CVE-2006-6540 or the next vulnerability affects your stack