CVE:CVE-2006-3430
CNNVD:CNNVD-200607-063
(1) PatchLink Update Server (PLUS)  6.1 P1之前版本和6.2 SR1 P1之前的6.2.x 版本以及 (2) Novell ZENworks 6.2 SR1及之前版本的checkprofile.asp中存在SQL注入漏洞。远程攻击者可以借助agentid参数执行任意SQL命令。
solution:Upgrade lumension patchlink_update_server to a higher version than 6.1,6.2.0.181,6.2.0.189,and avoid the version 6.1,6.2.0.181,6.2.0.189; Upgrade novell zenworks to a higher version than *:sr1,and avoid the version *:sr1