CVE:CVE-2005-4619
CNNVD:CNNVD-200512-979
phpoutsourcing Zorum Forum 3.5及更早版本的index.php中存在SQL注入漏洞，远程攻击者可通过在showhtmllist方法中的rollid参数执行任意SQL命令。
solution:Upgrade phpoutsourcing zorum to a higher version than 3.0,3.1,3.2,3.3,3.4,3.5,and avoid the version 3.0,3.1,3.2,3.3,3.4,3.5