CVE:CVE-2010-1923
CNNVD:CNNVD-201005-179
Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System的user.php存在SQL注入漏洞，远程攻击者可通过showgallery操作的id参数执行任意SQL命令。
solution:Upgrade phpscripte24 web_social_network_freunde_community to a higher version than 2.0,and avoid the version 2.0