CVE:CVE-2006-5145
CNNVD:CNNVD-200610-056
OlateDownload 3.4.0中存在多个SQL注入漏洞。远程攻击者可以通过(1) details.php中的page参数或(2)search.php中的query参数执行任意SQL命令。
solution:Upgrade olate olatedownload to a higher version than 3.4.0,and avoid the version 3.4.0