CVE:CVE-2007-2107
CNNVD:CNNVD-200704-327
XOOPS Rha7 Downloads 模块(rha7downloads)的visit.php中存在SQL注入漏洞。远程攻击者可以借助cid参数，执行任意的SQL指令。
solution:Upgrade rha7_downloads rha7_downloads to a higher version than 1.0,and avoid the version 1.0