CVE:CVE-2009-4792
CNNVD:CNNVD-201004-367
BandSite CMS是开源的基于PHP/Mysql的网站内容管理系统。
BandSite CMS的脚本includes/content/member_content.php存在SQL注入漏洞。远程攻击者可以借助脚本members.php的memid参数执行任意的SQL指令。
solution:Upgrade karl_core bandsite_cms to a higher version than 1.1.4,and avoid the version 1.1.4