The remote web server contains a CGI script that is affected by a SQL injection flaw. Description: The remote host is running Trac, an enhanced wiki and issue tracking system for software development projects written in python. The remote version of this software is prone to a SQL injection flaw through the ticket query module due to 'group' parameter is not properly sanitized.

Upgrade to Trac version 0.9.1 or later.

• http://projects.edgewall.com/trac/wiki/ChangeLog
• http://www.securityfocus.com/archive/1/418294/30/0/threaded

---

Updated on 2015-03-25