CVE:CVE-2006-3055
CNNVD:CNNVD-200606-333
VBZooM 1.02存在多个SQL注入漏洞。远程攻击者可以借助对meaning.php的(1) QuranID, (2) ShowByQuranID或(3) Action参数，执行任意SQL命令。
solution:Upgrade vbzoom vbzoom to a higher version than 1.02,and avoid the version 1.02