CVE:CVE-2006-4056
CNNVD:CNNVD-200608-129
katzlbt (a) Address Book 1.04e及早期版本，和(b) Address Book Reloaded 2.0-rc4之前版本的认证进程中存在多个SQL注入漏洞，远程攻击者可借助：(1)用户名或 (2)密码参数来执行任意SQL指令。
solution:Upgrade the_address_book the_address_book to a higher version than 1.04e,and avoid the version (,1.04e]; Upgrade the_address_book_reloaded the_address_book_reloaded to a higher version than 2.0,and avoid the version (,2.0]