CVE:CVE-2006-3940
CNNVD:CNNVD-200607-522
phpbb-Auction 存在多个SQL注入漏洞。远程攻击者可以借助(1) auction_room.php中的ar参数和(2)auction_store.php中的u参数，执行任意SQL命令。
solution:Upgrade phpbb_group phpbb-auction to a higher version than 1.0m,1.2m,1.3m,and avoid the version 1.0m,1.2m,1.3m