CVE:CVE-2006-3525
CNNVD:CNNVD-200607-139
PHCDownload 1.0.0 Final和1.0.0 Release Candidate 6及之前版本中的category.php存在SQL注入漏洞。远程攻击者可以借助id参数执行任意SQL指令。
solution:Upgrade phpcredo phcdownload to a higher version than 1.0.0_release_candidate_6,1.0.0_final,and avoid the version (,1.0.0_release_candidate_6],1.0.0_final