CVE:CVE-2002-2252
CNNVD:CNNVD-200212-504
Thatware 0.5.0版本及之前版本的auth.inc.php存在SQL注入漏洞。远程攻击者可以借助base64编码的user参数执行任意SQL命令。
solution:Upgrade atthat.com thatware to a higher version than 0.5,and avoid the version (,0.5]