CVE:CVE-2007-3588
CNNVD:CNNVD-200707-088
VBZooM 1.12版本的reply.php中存在SQL注入漏洞。远程攻击者可以借助对sub-join.php的Userid参数，执行任意SQL指令。注意：该漏洞可能与CVE-2006-3691.4相同。
solution:Upgrade vbzoom vbzoom to a higher version than 1.12,and avoid the version 1.12