CVE:CVE-2006-2459
CNNVD:CNNVD-200605-361
PHP-Fusion 6.00.307及之前版本的messages.php存在SQL注入漏洞。远程认证用户可以借助srch_where参数执行任意SQL指令。
solution:Upgrade php_fusion php_fusion to a higher version than 6.00.306,6.00.307,and avoid the version 6.00.306,6.00.307