CVE:CVE-2008-1939
CNNVD:CNNVD-200804-362
W1L3D4 Philboard 1.0存在多个注入漏洞。远程攻击者通过(1) id 和 (2) topic 参数到达 (a) philboard_reply.asp, 以及通过 (3) forumid参数到达 (b) philboard_newtopic.asp，以执行任意SQL命令。
solution:Upgrade aspindir philboard to a higher version than 1.0,and avoid the version 1.0