CVE-2005-3980
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.
Date published : 2005-12-04
http://www.securityfocus.com/bid/15676/
http://www.securityfocus.com/archive/1/418294/100/0/threaded