CVE:CVE-2010-2124
CNNVD:CNNVD-201006-013
Bartels Schone ConPresso 的脚本firma.php存在SQL注入漏洞。远程攻击者可以借助id 参数执行任意的SQL命令。
solution:Upgrade bartels-schoene conpresso to a higher version than 4.0.7,and avoid the version 4.0.7