CVE:CVE-2007-2911
CNNVD:CNNVD-200705-556
Jelsoft vBulletin 的admincp/attachment.php中存在SQL注入漏洞。远程认证管理员可以借助"Attached After"字段(GPC['search']['datelineafter']变量)，执行任意的SQL指令。此漏洞与CVE-2007-1573有关。
solution:Upgrade jelsoft vbulletin to a higher version than 3.6.5,and avoid the version (,3.6.5]