CVE:CVE-2008-5292
CNNVD:CNNVD-200812-009
VideoGirls BiZ是一款包含了在线支付、视频网络聊天业务的网站套件。
VideoGirls BiZ的view_snaps.php中存在SQL注入漏洞。远程攻击者可以借助type参数，执行任意SQL指令。
solution:Upgrade videogirls videogirls_biz to a higher version than _nil_,and avoid the version _nil_