CVE:CVE-2007-6602
CNNVD:CNNVD-200712-373
NoseRub中的app/models/identity.php存在SQL注入漏洞。远程攻击者可以借助登录脚本的用户名字段执行任意SQL指令。
solution:Upgrade noserub noserub to a higher version than 0.5.2,and avoid the version (,0.5.2]