CVE:CVE-2006-3054
CNNVD:CNNVD-200606-336
VBZooM 1.11存在多个SQL注入漏洞。远程攻击者可以借助对(a)show.php的(1)sobjectID或(2)MAINID参数，或对(b)subject.php的(3)MainID参数，执行任意SQL命令。
solution:Upgrade vbzoom vbzoom to a higher version than 1.11,and avoid the version 1.11