CVE:CVE-2009-3533
CNNVD:CNNVD-200910-121
Meeting Room Booking System (MRBS) 1.4.2之前版本的report.php中存在SQL注入漏洞。远程攻击者可以借助typematch参数，执行任意的SQL指令。
solution:Upgrade john_beranek meeting_room_booking_system to a higher version than 1.4.1,0.1,0.2,0.5,0.6,0.7,0.8,0.8-pre1,0.8-pre2,0.8-pre3,0.8-pre4,0.8-pre5,0.8-pre6,0.8.1,0.9,0.9-pre1,0.9-pre2,0.9.1,0.9.2,1.0,1.0-pre1,1.0-pre2,1.1,1.1-pre1,1.1-pre2,1.2,1.2-pre3,1.2.1,1.2.1-pre1,1.2.1-pre2,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.6.1,1.4,and avoid the version (,1.4.1],0.1,0.2,0.5,0.6,0.7,0.8,0.8-pre1,0.8-pre2,0.8-pre3,0.8-pre4,0.8-pre5,0.8-pre6,0.8.1,0.9,0.9-pre1,0.9-pre2,0.9.1,0.9.2,1.0,1.0-pre1,1.0-pre2,1.1,1.1-pre1,1.1-pre2,1.2,1.2-pre3,1.2.1,1.2.1-pre1,1.2.1-pre2,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.6.1,1.4