CVE:CVE-2005-4486
CNNVD:CNNVD-200512-537
** 争议 ** Quantum Art QP7.Enterprise(之前的Q-Publishing)存在SQL注入漏洞，远程攻击者可以通过传到(1)news_and_events_new.asp和(2)news.asp的p_news_id参数执行任意SQL命令。
solution:Upgrade quantum_art qp7_enterprise to a higher version than *