CVE:CVE-2008-2626
CNNVD:CNNVD-200806-127
Battle Blog 1.25以及之前的版本中的comment.asp存在SQL注入漏洞。远程攻击者可以借助进入参数，执行任意的SQL指令。
solution:Upgrade battleblog battleblog to a higher version than *:build_4,1.0d:build_3,1.0d:build_4,1.0d:build_5,1.0d:build_5a,1.0d:build_6,1.05:build_1,1.20:build_1,1.20:build_2,1.20:build_3,and avoid the version *:build_4,1.0d:build_3,1.0d:build_4,1.0d:build_5,1.0d:build_5a,1.0d:build_6,1.05:build_1,1.20:build_1,1.20:build_2,1.20:build_3