CVE:CVE-2009-4728
CNNVD:CNNVD-201003-237
Questions Answered中的administrative页面存在SQL注入漏洞。远程攻击者可以借助username参数执行任意SQL命令。注意：一些细节信息来源于第三方机构。
solution:Upgrade questions_answered questions_answered to a higher version than 1.3,and avoid the version 1.3