CVE:CVE-2007-3687
CNNVD:CNNVD-200707-187
vBulletin Inferno Technologies RPG Inferno 2.4模块的inferno.php中存在SQL注入漏洞。远程验证攻击者可以借助ScanMember do操作中的id参数，执行任意SQL指令。
solution:Upgrade infernotechnologies rpg_inferno to a higher version than 2.4,and avoid the version (,2.4]