CVE:CVE-2007-3345
CNNVD:CNNVD-200706-385
PHPAccounts的index.php中存在多个SQL注入漏洞。远程攻击者可以借助(1)Outgoing_Type_ID；(2)Outgoing_ID；(3)Project_ID；(4)Client_ID；(5)Invoice_ID或(6)Vendor_ID参数，执行任意的SQL指令。
solution:Upgrade php_accounts php_accounts to a higher version than 0.5,and avoid the version 0.5