Description
SQL injection vulnerability in search.aspx in BugTracker.NET 3.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via a custom field to the search page.
References
- bugtrackernet-search-sql-injection(61434) vdb-entry
- 20100826 BugTracker.net 3.4.3 SQL Injection mailing-list
- 41150 third-party-advisory
- http://sourceforge.net/projects/btnet/files/btnet_3_4_4_release_notes.txt/view