CVE:CVE-2008-2036
CNNVD:CNNVD-200804-453
dream4 Koobi Pro 6.25的index.php中存在SQL注入漏洞。远程攻击者通过一个poll操作中的poll_id参数来执行任意SQL命令。
solution:Upgrade dream4 koobi to a higher version than 6.25:pro,and avoid the version 6.25:pro