CVE:CVE-2010-4925
CNNVD:CNNVD-201110-620
Nuked-Klan的Partenaires模块1.5版本的clic.php中存在SQL注入漏洞。远程攻击者可借助id参数执行任意SQL命令。
solution:Upgrade nuked-klan partenaires_module to a higher version than 1.5,and avoid the version 1.5