CVE:CVE-2005-1875
CNNVD:CNNVD-200506-031
Exhibit Engine (EE) 1.22中的list.php脚本存在多个SQL注入漏洞，远程攻击者可借助:(1) search_row参数，(2)sort_row参数，(3)order参数，或(4)perpage参数，执行任意SQL指令。
solution:Upgrade exhibit_engine exhibit_engine to a higher version than 1.22,1.54_rc4,and avoid the version 1.22,1.54_rc4