CVE:CVE-2008-0187
CNNVD:CNNVD-200801-123
SAM Broadcaster samPHPweb, possibly 4.2.2及其早期版本的songinfo.php中的SQL注入漏洞会允许远程攻击者通过songid参数来注入任意SQL命令。
solution:Upgrade spacial_audio_solutions samphpweb to a higher version than 4.2.2,and avoid the version 4.2.2