CVE:CVE-2006-2486
CNNVD:CNNVD-200605-375
YapBB 1.2 Beta2 及之前版本的find.php中存在SQL注入漏洞。远程攻击者可以借助userID参数执行任意SQL指令。
solution:Upgrade yapbb yapbb to a higher version than 1.1,1.2,1.2_beta2,and avoid the version 1.1,1.2,1.2_beta2