CVE:CVE-2010-1366
CNNVD:CNNVD-201004-233
Uiga Fan Club的脚本admin/admin_login.php存在多个SQL注入漏洞。远程攻击者可以借助(1) admin_name 和 (2) admin_password参数执行任意的SQL指令。
solution:Upgrade uiga fan_club to a higher version than 1.0,and avoid the version 1.0