CVE:CVE-2006-0693
CNNVD:CNNVD-200602-213
Roberto Butti CALimba 0.99.2 beta及之前版本的rb_auth.php中存在多个SQL注入漏洞。远程攻击者可以借助(1) login和(2) password参数执行任意SQL命令并绕过登录认证。
solution:Upgrade roberto_butti calimba to a higher version than 0.99.1,0.99.2_beta,and avoid the version 0.99.1,0.99.2_beta