CVE:CVE-2007-3244
CNNVD:CNNVD-200706-221
bbPress的bb-includes/formatting-functions.php中存在SQL注入漏洞。远程攻击者可以借助提交到forums/bb-edit.php的未明参数，执行任意的SQL指令。此漏洞又称"quircky slashes bug"。
solution:Upgrade bbpress bbpress to a higher version than 0.8,and avoid the version 0.8