CVE:CVE-2005-4010
CNNVD:CNNVD-200512-087
KBase Express 1.0.0及之前版本存在SQL注入漏洞。远程攻击者可以借助(1)对category.php的 id 参数和 (2) 对search.php的search 参数，执行任意的SQL指令。
solution:Upgrade sensation_designs kbase_express to a higher version than 1.0.0,and avoid the version (,1.0.0]