CVE:CVE-2009-2605
CNNVD:CNNVD-200907-377
Traidnt Up 2.0中的adminquery.php存在多个SQL注入漏洞允许运程攻击者借助uploadcp/index.php的(1)trupuser和(2)truppassword cookies执行任意的SQL指令。
solution:Upgrade traidnt traidnt_up to a higher version than 2.0,and avoid the version 2.0