CVE:CVE-2010-0611
CNNVD:CNNVD-201002-119
Baal 系统3.8版本的adminlogin.php脚本中存在多个SQL注入漏洞。远程攻击者可以借助参数(1) username 和 (2) password，执行任意SQL命令。
solution:Upgrade baalsystems baal_systems to a higher version than 3.8,3.6,3.7,and avoid the version (,3.8],3.6,3.7