CVE:CVE-2007-3909
CNNVD:CNNVD-200707-371
Bandersnatch 0.4版本中存在多个SQL注入漏洞。远程攻击者可以借助(1)日期和(2)对index.php的limit参数以及其它未明向量，执行任意SQL指令。
solution:Upgrade bandersnatch bandersnatch to a higher version than 0.4,and avoid the version 0.4