https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-3784.htmlhttps://patchthecve.com/cve/CVE-2008-3784.htmlTue, 16 Jun 2026 22:56:32 +0000HIGH 7.5: SQL injection vulnerability in scrape.php in BtiTracker 1.4.7 and earlier and xBtiTracker 2.0.542 and earlier allows remote attackers to execute arbitrary SQL commands via the info_hash parameter.https://patchthecve.com/cve/CVE-2007-5986.htmlhttps://patchthecve.com/cve/CVE-2007-5986.htmlTue, 16 Jun 2026 22:47:12 +0000HIGH 7.5: SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.https://patchthecve.com/cve/CVE-2006-7159.htmlhttps://patchthecve.com/cve/CVE-2006-7159.htmlTue, 16 Jun 2026 22:34:29 +0000MEDIUM 6.4: Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action.https://patchthecve.com/cve/CVE-2006-6972.htmlhttps://patchthecve.com/cve/CVE-2006-6972.htmlTue, 16 Jun 2026 22:34:08 +0000HIGH 7.5: SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) by and (2) order parameters. NOTE: it is not clear whether this issue is exploitable.