CVE:CVE-2007-2305
CNNVD:CNNVD-200704-549
Quick and Dirty Blog (QDBlog)的authenticate.php存在多个SQL注入漏洞。远程攻击者可以借助用户名和密码参数，执行任意的SQL指令。
solution:Upgrade qdblog qdblog to a higher version than 0.4,and avoid the version (,0.4]