CVE:CVE-2006-2416
CNNVD:CNNVD-200605-304
e107 0.7.2及之前版本的class2.php存在SQL注入漏洞。 远程攻击者可以借助$pref['cookie_name']中定义的cookie，执行任意SQL指令。
solution:Upgrade e107 e107 to a higher version than 0.6_10,0.6_11,0.6_12,0.6_13,0.6_14,0.6_15,0.6_15a,0.7,0.7.1,0.7.2,0.545,0.554,0.555_beta,0.603,0.616,0.617,0.6171,0.6175,and avoid the version 0.6_10,0.6_11,0.6_12,0.6_13,0.6_14,0.6_15,0.6_15a,0.7,0.7.1,0.7.2,0.545,0.554,0.555_beta,0.603,0.616,0.617,0.6171,0.6175