CVE:CVE-2008-0129
CNNVD:CNNVD-200801-075
Site@School2.3.10和它早期版本的starnet/addons/slideshow_full.php的SQL注入漏洞会允许远程黑客经由参数来执行任意SQL命令。
solution:Upgrade siteatschool siteatschool to a higher version than 2.3.10,and avoid the version (,2.3.10]