CVE:CVE-2009-0324
CNNVD:CNNVD-200901-420
BibCiter 1.4版本存在多个SQL注入漏洞。远程攻击者可以借助(1)对reports/projects.php的id参数，(2)对reports/contacts.php的id参数和(3)对reports/users.php的idu参数，执行任意的SQL指令。
solution:Upgrade bibciter bibciter to a higher version than 1.4,and avoid the version 1.4