CVE:CVE-2007-1254
CNNVD:CNNVD-200703-124
Connectix Boards 0.7及之前版本的part.userprofile.php中存在SQL注入漏洞。远程认证用户可以通过提交p_skin参数到index.php，来执行任意的SQL指令和获得特权。
solution:Upgrade connectix connectix_boards to a higher version than 0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.6,0.6.1,0.7,and avoid the version 0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.5,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.6,0.6.1,0.7