CVE:CVE-2004-2322
CNNVD:CNNVD-200412-709
phpWebSite 0.9.3-2以前版本的(1)announce和(2)notes模块存在SQL注入漏洞。远程攻击者利用该漏洞执行任意SQL查询，如使用announce模块的ANN_id参数。
solution:Upgrade phpwebsite phpwebsite to a higher version than 0.9.0,0.9.1,0.9.2,0.9.2.1,0.9.3,0.9.3.1,and avoid the version 0.9.0,0.9.1,0.9.2,0.9.2.1,0.9.3,0.9.3.1