CVE:CVE-2005-2012
CNNVD:CNNVD-200506-184
login in paFAQ 1.0 Beta 4试用版中存在多个SQL注入漏洞，远程攻击者可借助：(1) username参数或(2) id参数，来执行任意SQL指令，或绕过认证。
solution:Upgrade php_arena pafaq to a higher version than 1.0_beta_4,and avoid the version 1.0_beta_4