CVE:CVE-2007-2749
CNNVD:CNNVD-200705-368
FAQEngine 的question.php中存在SQL注入漏洞。远程攻击者可以借助演示操作中的questionref参数，执行任意的SQL指令。
solution:Upgrade faqengine faqengine to a higher version than 4.16.03,and avoid the version (,4.16.03]