CVE:CVE-2007-6373
CNNVD:CNNVD-200712-164
GestDown中存在多个SQL注入漏洞，远程攻击者可以借助(1)catdownload.php中的categorie参数,或(2) download.php或(3) hitcounter.php中的id参数执行任意SQL指令。
solution:Upgrade gestdown gestdown to a higher version than 1.00_beta,and avoid the version 1.00_beta