CVE:CVE-2005-0302
CNNVD:CNNVD-200505-122
BackOffice Lite 6.0和6.01的default.asp中存在SQL注入漏洞，允许远程攻击者通过HTTP头中的referer字段来执行任意SQL命令。
solution:Upgrade comersus_open_technologies comersus_backoffice_lite to a higher version than 6.0,6.1,and avoid the version 6.0,6.1