CVE:CVE-2007-2662
CNNVD:CNNVD-200705-287
EfesTECH Haber 中存在SQL注入漏洞。远程攻击者可以借助提交到最高级别的uri的id参数，执行任意的SQL指令。
solution:Upgrade efestech_haber efestech_haber to a higher version than 5.0,and avoid the version 5.0