CVE:CVE-2019-7316
CNNVD:CNNVD-201902-007
CSS-TRICKS Chat2版本中的jumpin.php文件的‘userid’函数存在SQL注入漏洞。远程攻击者可利用该漏洞执行任意SQL命令。
solution:Upgrade css-tricks chat2 to a higher version than 2015-05-05,and avoid the version (,2015-05-05]