CVE:CVE-2006-6072
CNNVD:CNNVD-200611-408
BPG-InfoTech Easy Publisher和Smart Publisher//Pro 2.7.7中的bpg/publications_list.asp存在SQL注入漏洞，远程攻击者可以通过vjob参数来执行任意SQL命令。
solution:Upgrade bpg-infotech easy_publisher to a higher version than 2.7.7,and avoid the version 2.7.7; Upgrade bpg-infotech smart_publisher_pro to a higher version than 2.7.7,and avoid the version 2.7.7