CVE:CVE-2009-4791
CNNVD:CNNVD-201004-366
Family Connections (又称为 FCMS)存在多个SQL注入漏洞。远程攻击者可以借助多个参数执行任意的SQL命令。这些参数包含：(1)脚本addressbook.php的letter参数、(2)脚本recipes.php的id 参数、(3)脚本register.php的year参数、(4)脚本home.php的poll_id参数、(5)脚本lostpw.php的email参数。
solution:Upgrade ryan_haudenschilt family_connections to a higher version than 1.8.1,0.1.1,0.1.2,0.5,0.6,0.8,0.9,0.9.1,0.9.2,0.9.5,0.9.8,0.9.9,1.0,1.1,1.1.1,1.1.2,1.2,1.3,1.3.1,1.4,1.5,1.6,1.6.1,1.6.2,1.6.3,1.6.4,1.7,1.7.1,1.7.2,1.7.3,1.7.4,1.8,and avoid the version (,1.8.1],0.1.1,0.1.2,0.5,0.6,0.8,0.9,0.9.1,0.9.2,0.9.5,0.9.8,0.9.9,1.0,1.1,1.1.1,1.1.2,1.2,1.3,1.3.1,1.4,1.5,1.6,1.6.1,1.6.2,1.6.3,1.6.4,1.7,1.7.1,1.7.2,1.7.3,1.7.4,1.8