CVE:CVE-2008-5650
CNNVD:CNNVD-200812-342
AlstraSoft Web主机目录的登陆目录中存在SQL注入漏洞。远程攻击者可以借助pwd参数，执行任意SQL指令。
solution:Upgrade alstrasoft webhost_directory to a higher version than _nil_,and avoid the version _nil_