CVE:CVE-2007-4208
CNNVD:CNNVD-200708-056
Next Gen Portfolio管理器的default.asp中存在SQL注入漏洞。远程攻击者可以借助(1) Users_Email或(2)一个ExecuteTheLogin操作中的Users_Password参数，执行任意SQL指令。
solution:Upgrade morgan_ids next_gen_portfolio_manager to a higher version than *