CVE:CVE-2007-4922
CNNVD:CNNVD-200709-200
KwsPHP的jeuxflash 中的play.php存在SQL注入漏洞，远程验证用户可以借助一个index.php的play ac操作中的id参数执行任意SQL指令。
solution:Upgrade jeuxflash jeuxflash_module to a higher version than 1.0,and avoid the version 1.0; Upgrade kwsphp kwsphp to a higher version than *