CVE:CVE-2010-1706
CNNVD:CNNVD-201005-028
2daybiz Auction Script的login.php存在多个SQL注入漏洞，远程攻击者可通过index.php的(1)登录字段(即username参数)，或(2)密码字段执行任意SQL命令。
solution:Upgrade 2daybiz auction_script to a higher version than *