CVE:CVE-2008-1726
CNNVD:CNNVD-200804-147
当magic_quotes_gpc无效时，KnowledgeQuest 2.6版本存在多个SQL注入漏洞。远程攻击者借助(1)发送发到(a)articletext.php和(b) articletextonly.php的kid参数，以及(2)发送到(c)logincheck.php的用户名参数，执行任意的SQL指令。
solution:Upgrade myknowledgequest knowledgequest to a higher version than 2.6,and avoid the version 2.6