CVE:CVE-2008-5075
CNNVD:CNNVD-200811-231
E-Uploader Pro (又称Uploader PRO)中存在多个SQL注入漏洞。当magic_quotes_gpc被中止时，远程攻击者可以借助到(a)img.php,(b)file.php,(c)mail.php,(d)thumb.php,(e)zip.php和(f)zipit.php的(1)id参数和到(g)browser.php的(2)view参数，来执行任意的SQL指令。
solution:Upgrade scriptsfrenzy e-uploader_pro to a higher version than 1.0,and avoid the version 1.0