CVE:CVE-2006-0146
CNNVD:CNNVD-200601-050
ADOdb for PHP 4.70之前版本中的server.php脚本(用在多个产品中，包括(1) Mantis、(2) PostNuke、(3) Moodle、(4) Cacti、(5) Xaraya、(6) PHPOpenChat、(7) MAXdev MD-Pro和(8) MediaBeez)，在MySQL根密码为空时，远程攻击者可以通过sql参数执行任意SQL命令。
solution:Upgrade john_lim adodb to a higher version than 4.66,4.68,and avoid the version 4.66,4.68; Upgrade mantis mantis to a higher version than 0.19.4,1.0.0_rc4,and avoid the version 0.19.4,1.0.0_rc4; Upgrade mediabeez mediabeez to a higher version than *; Upgrade moodle moodle to a higher version than 1.5.3,and avoid the version 1.5.3; Upgrade postnuke_software_foundation postnuke to a higher version than 0.761,and avoid the version 0.761; Upgrade the_cacti_group cacti to a higher version than 0.8.6g,and avoid the version 0.8.6g