CVE:CVE-2007-4540
CNNVD:CNNVD-200708-444
Olate Download (od) 3.4.2版本的download.php中存在多个SQL注入漏洞。远程攻击者可以借助(1) HTTP_REFERER或(2) HTTP_USER_AGENT HTTP页眉，执行任意SQL指令。
solution:Upgrade olate olatedownload to a higher version than 3.4.2,and avoid the version 3.4.2