CVE:CVE-2010-1336
CNNVD:CNNVD-201004-142
INVOhost存在多个SQL注入漏洞。远程攻击者可以通过(1)脚本site.php的参数id和newlanguage；(2)脚本manuals.php的search参数；(3)脚本faq.php的未明向量注入任意的SQL命令。
solution:Upgrade invohost invohost to a higher version than 3.4,and avoid the version 3.4