CVE:CVE-2006-2255
CNNVD:CNNVD-200605-141
Creative Community Portal 1.1及之前版本存在多个SQL注入漏洞。远程攻击者可以借助(1) 对(a) ArticleView.php的article_id参数, (2)对(b) DiscView.php或(c) Discussions.php的 forum_id参数, (3)对(d) EventView.php的event_id参数, 对 (e) PollResults.php的(4) AddVote和(5) answer_id 参数, 或对(f) DiscReply.php.的(7) mid 参数，执行任意SQL指令。
solution:Upgrade creative_software community_portal to a higher version than 1.1,and avoid the version 1.1