CVE:CVE-2012-2923
CNNVD:CNNVD-201205-222
Hypermethod eLearning Server 4G版本中的news.php4中存在SQL注入漏洞。远程攻击者可利用该漏洞借助nid参数执行任意SQL命令。
solution:Upgrade hypermethod elearning_server to a higher version than 4g,and avoid the version 4g