CVE:CVE-2006-3926
CNNVD:CNNVD-200607-507
PhpProBid 5.24存在多个SQL注入漏洞。远程攻击者可以借助对(a) viewfeedback.php 的(1) view或(2) start参数，或对(b) categories.php的(3) orderType 参数，执行任意SQL命令。
solution:Upgrade php_pro_bid php_pro_bid to a higher version than 5.24,and avoid the version 5.24