CVE:CVE-2009-2120
CNNVD:CNNVD-200906-308
TekBase All-in-One 3.1版本中存在多个SQL注入漏洞。远程认证用户可以借助(1)对admin.php的ids参数，(2)对members.php的y参数以及未明向量，执行任意SQL指令。
solution:Upgrade tekbase tekbase_all-in-one to a higher version than 3.1,and avoid the version 3.1