CVE:CVE-2005-2566
CNNVD:CNNVD-200508-137
Open Bulletin Board (OpenBB)存在多个SQL注入漏洞。这使得远程攻击者可以借助于(1)传递到board.php的FID参数或(2)传递到member.php的UID参数执行任意SQL命令。
solution:Upgrade openbb openbb to a higher version than *
solution:Upgrade churchinfo churchinfo to a higher version than 1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.2.0,1.2.1,1.2.2,and avoid the version 1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.2.0,1.2.1,1.2.2