CVE:CVE-2009-3226
CNNVD:CNNVD-200909-333
AlmondSoft Almond Classifieds Ads Enterprise和Almond Affiliate Network Classifieds的index.php中存在SQL注入漏洞。远程攻击者可以借助一个manw_repl add_form操作中的replid参数，执行任意SQL指令。
solution:Upgrade almondsoft affiliate_network_classifieds to a higher version than *; Upgrade almondsoft almond_classifieds to a higher version than *