CVE:CVE-2004-2437
CNNVD:CNNVD-200412-894
PHP-Fusion 4.01版本存在SQL注入漏洞。远程攻击者可以借助(1)index.php或(2) members.php或（3）comments.php的comment_id参数执行任意SQL命令。
solution:Upgrade php_fusion php_fusion to a higher version than 4.01,and avoid the version 4.01