CVE:CVE-2009-2010
CNNVD:CNNVD-200906-117
Haudenschilt Family Connections CMS (FCMS) 1.9版本及其早期版本中存在多个SQL注入漏洞。远程认证用户可以借助(1)对messageboard.php的thread参数,(2)对profile.php的成员参数,(3)对gallery/index.php的pid参数以及(4)fcms_login_id cookie参数，执行任意SQL指令。
solution:Upgrade haudenschilt family_connections_cms to a higher version than 1.9,0.1.1,0.1.2,0.5,0.6,0.8,0.9,1.4,1.8.1,1.8.2,and avoid the version (,1.9],0.1.1,0.1.2,0.5,0.6,0.8,0.9,1.4,1.8.1,1.8.2