CVE:CVE-2009-4618
CNNVD:CNNVD-201001-181
Tourism Script Bus Script中存在多个SQL注入漏洞，远程攻击者可以借助(1) aboutus.php和(2) faq.php的sitetext_id参数执行任意SQL指令。
solution:Upgrade tourismscripts bus_script to a higher version than *