CVE:CVE-2008-4785
CNNVD:CNNVD-200810-494
e107的alternate_profiles插件中的newuser.php存在SQL注入漏洞。远程攻击者借助id参数执行任意的SQL指令。
solution:Upgrade e107 alternate_profiles_plugin to a higher version than *,0.2,and avoid the version 0.2