Description Traq 3.7.1 allows SQL Injection via a tickets?search= URI. References https://packetstormsecurity.com/files/149894