CVE:CVE-2005-4018
CNNVD:CNNVD-200512-093
Landshop Real Estate Commerce System 0.6.3及之前版本的ls.php存在SQL注入漏洞。远程攻击者可以借助 (1) start， (2) search_order， (3) search_type， (4) search_area和(5) keyword 参数，执行任意的SQL指令。
solution:Upgrade landshop real_estate_commerce_system to a higher version than 0.6.3,and avoid the version (,0.6.3]