CVE:CVE-2007-0316
CNNVD:CNNVD-200701-277
All In One Control Panel (AIOCP) 1.3.010及之前版本中存在多个SQL注入漏洞。当magic_quotes_gpc被禁用时，远程攻击者可以借助提交到shared/code/cp_authorization.php的(1)xuser_name参数和到public/code/cp_downloads.php的(2)did参数，执行任意的SQL指令。
solution:Upgrade all_in_one_control_panel all_in_one_control_panel to a higher version than 1.3.010,and avoid the version (,1.3.010]