CVE:CVE-2009-3543
CNNVD:CNNVD-200910-131
Phenotype CMS before 2.9版本的_phenotype/admin/login.php中存在SQL注入漏洞。远程攻击者可以借助用户参数(又称登录名)，执行任意的SQL指令。
solution:Upgrade phenotype-cms phenotype_cms to a higher version than 2.8,1.0,2.0,2.1,2.2,2.3,2.4,2.5,2.5.1,2.6,2.7,and avoid the version (,2.8],1.0,2.0,2.1,2.2,2.3,2.4,2.5,2.5.1,2.6,2.7