= 3.7.1
Traq 3.7.1 allows SQL Injection via a tickets?search= URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.