CVE:CVE-2005-1637
CNNVD:CNNVD-200505-1076
NPDS 4.8和5.0版本存在多个SQL注入漏洞，远程攻击者可以通过传给(1)comments.php或(2)pollcomments.php的thold参数来执行任意SQL命令。
solution:Upgrade npds npds to a higher version than 4.8,5.0,and avoid the version 4.8,5.0