CVE:CVE-2007-1634
CNNVD:CNNVD-200703-579
Net Portal Dynamic System (NPDS) 5.10及之前版本的grab_globals.php中存在变量提取漏洞。远程攻击者可以借助_FILES[DB][tmp_name]参数，执行SQL注入攻击。这会重写包含动态变量评估的$DB变量。
solution:Upgrade net_portal_dynamic_system net_portal_dynamic_system to a higher version than 5.10,and avoid the version (,5.10]