CVE:CVE-2008-2334
CNNVD:CNNVD-200805-245
W1L3D4 Philboard 0.5版本存在多个SQL注入漏洞。远程攻击者可以借助到(a)admin/philboard_admin-forumedit.asp,(b)admin/philboard_admin-forum.asp,和(c)W1L3D4_foruma_yeni_konu_ac.asp的(1)forumid参数，到(d)W1L3D4_konuoku.asp和(e)W1L3D4_konuya_mesaj_yaz.asp的(2)id参数，以及到W1L3D4_konuya_mesaj_yaz.asp的(3)topic参数。此漏洞不同于CVE-2008-1939,CVE-2007-2641和CVE-2007-0920。
solution:Upgrade aspindir philboard to a higher version than 0.5,and avoid the version 0.5