CVE:CVE-2009-2147
CNNVD:CNNVD-200906-343
phpWebThings 1.5.2版本及其早期版本的fdown.php中存在SQL注入漏洞。远程攻击者可以借助id参数，执行任意SQL指令。
solution:Upgrade phpwebthings phpwebthings to a higher version than 1.5.2,0.1,0.2,0.2b,0.3,0.4,0.4.1,0.4.2,0.6.0,1.0,1.1a,1.4,1.4.4,1.5.0,1.5.1,and avoid the version (,1.5.2],0.1,0.2,0.2b,0.3,0.4,0.4.1,0.4.2,0.6.0,1.0,1.1a,1.4,1.4.4,1.5.0,1.5.1