CVE:CVE-2007-0527
CNNVD:CNNVD-200701-465
Website Baker 2.6.5及之前版本的class.login.php中的is_remembered函数存在SQL注入漏洞。远程攻击者可以借助REMEMBER_KEY cookie参数，执行任意的SQL指令。
solution:Upgrade website_baker website_baker to a higher version than 2.6.5,and avoid the version (,2.6.5]