CVE:CVE-2007-3399
CNNVD:CNNVD-200706-433
Power Phlogger的include/get_userdata.php中存在SQL注入漏洞。远程攻击者可以借助提交到login.php的用户名参数，执行任意的SQL指令。
solution:Upgrade phpee power_phlogger to a higher version than 2.2.5,2.2.2:alpha,2.2.2:beta,2.2.3,2.2.4,and avoid the version (,2.2.5],2.2.2:alpha,2.2.2:beta,2.2.3,2.2.4