CVE:CVE-2007-3589
CNNVD:CNNVD-200707-065
b1gbb 2.24.0版本中存在多个SQL注入漏洞。远程攻击者可以借助id参数对(1)showthread.php或(2)showboard.php，执行任意SQL指令。
solution:Upgrade b1g b1gbb to a higher version than 2.24,and avoid the version 2.24