CVE:CVE-2006-1958
CNNVD:CNNVD-200604-401
WWWThreads RC 3存在多个SQL注入漏洞。这使得远程攻击者可以借助于(1)传递到register.php中的forumreferrer cookie和(2)message_list.php中的messages参数执行任意SQL命令。
solution:Upgrade wired_community_software wwwthreads to a higher version than rc3,and avoid the version rc3