CVE:CVE-2008-2492
CNNVD:CNNVD-200805-357
Campus Bulletin Board 3.4版本存在多个SQL注入漏洞。远程攻击者可以借助(1)到post3/view.asp的id参数和(2)到post3/book.asp的回顾参数，执行任意的SQL指令。
solution:Upgrade badongo campus_bulletin_board to a higher version than 3.4,and avoid the version 3.4