CVE:CVE-2005-3976
CNNVD:CNNVD-200512-043
包括(1) DUamazon 3.1， (2) DUarticle 1.1， (3) DUclassified 4.2， (4) DUdirectory 3.1 和 DUdirectory Pro 3.0 和 3.0 SQL， (5) DUdownload 1.1， (6) DUgallery 3.3， (7) DUnews 1.1， 以及 (8) DUpaypal 3.1和DUpaypal Pro 3.0在内的多款DUware软件中使用的type.asp中存在SQL注入漏洞。远程攻击者可通过iType参数执行任意的SQL指令。
solution:Upgrade duware duamazon to a higher version than 3.1,and avoid the version 3.1; Upgrade duware duarticle to a higher version than 1.1,and avoid the version 1.1; Upgrade duware duclassified to a higher version than 4.2,and avoid the version 4.2; Upgrade duware dudirectory to a higher version than 3.1,and avoid the version 3.1; Upgrade duware dudirectory_pro to a higher version than 3.0,and avoid the version 3.0; Upgrade duware dudirectory_pro_sql to a higher version than 3.0,and avoid the version 3.0; Upgrade duware dudownload to a higher version than 1.1,and avoid the version 1.1; Upgrade duware dugallery to a higher version than 3.3,and avoid the version 3.3; Upgrade duware dunews to a higher version than 1.1,and avoid the version 1.1; Upgrade duware dupaypal to a higher version than 3.1,and avoid the version 3.1; Upgrade duware dupaypal_pro to a higher version than 3.0,and avoid the version 3.0