CVE:CVE-2008-2907
CNNVD:CNNVD-200806-410
WebChamado 1.1的admin/index.php中存在SQL注入漏洞, 在magic_quotes_gpc 无效时, 远程攻击者可以通过eml参数来执行任意SQL命令。
solution:Upgrade webchamado webchamado to a higher version than 1.1,and avoid the version 1.1