CVE:CVE-2008-3416
CNNVD:CNNVD-200807-506
IceBB是一个基于PHP+MySQL的开源论坛系统。
IceBB的modules/members.php文件没有正确地验证对username参数的输入便用在了SQL查询中。
solution:Upgrade icebb icebb to a higher version than 1.0:rc9,1.0:rc9.1,1.0:rc9.2,and avoid the version 1.0:rc9,1.0:rc9.1,1.0:rc9.2