CVE:CVE-2006-5140
CNNVD:CNNVD-200610-020
Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a的display.php中存在SQL注入漏洞。远程攻击者可以通过id参数执行任意SQL命令。
solution:Upgrade lappy512 php_krazy_image_host_script to a higher version than 0.7a,and avoid the version 0.7a