CVE:CVE-2005-1673
CNNVD:CNNVD-200505-1123
Help Center Live存在多个SQL注入漏洞，远程攻击者可以通过(1)传给index.php的id参数，(2)传给view.php的tid参数，传给(3)download.php或(4)chat_download.php的fid参数，(5)传给icon.php的status参数，传给(6)index.php或(7)view.php的TICKET_tid参数，来执行任意SQL命令。
solution:Upgrade ubertec help_center_live to a higher version than *