CVE:CVE-2009-2096
CNNVD:CNNVD-200906-284
phpCollegeExchange 0.1.5c版本的house/listing_view.php中存在SQL注入漏洞。远程攻击者可以借助itemnr参数，执行任意SQL指令。
solution:Upgrade david_degner phpcollegeexchange to a higher version than 0.1.5c,and avoid the version 0.1.5c