CVE:CVE-2005-3315
CNNVD:CNNVD-200510-263
Novell的ZENworks组件允许组织从SuSE Linux平台管理Windows工作站，Patch Management是其中用于管理补丁的组件。 
Novell ZENworks Patch Management 6.2.2.181 以前版本允许攻击者通过 (1) 传递computers/default.asp的Direction参数 (2) SearchText (3) StatusFilter (4)传递给reports/default.asp computerFilter 参数执行任意的SQL语句。
solution:Upgrade novell zenworks_patch_management_server to a higher version than 6.0.0.52,and avoid the version 6.0.0.52