CVE:CVE-2007-2759
CNNVD:CNNVD-200705-393
Adempiere 3.1.6之前版本的ValuePreference class (grid/ed/ValuePreference.java)中的insert函数存在多个SQL注入漏洞。远程攻击者可以借助(1)m_Attribute或(2)m_Value参数，执行任意的SQL指令。
solution:Upgrade adempiere adempiere to a higher version than 3.1.5,and avoid the version (,3.1.5]