CVE:CVE-2005-4137
CNNVD:CNNVD-200512-171
DRZES HMS 3.2的viewinvoice.php中存在SQL注入漏洞，远程攻击者可以通过invoiceID参数执行任意SQL命令。
solution:Upgrade fad_solutions drzes_hms to a higher version than 3.2,and avoid the version 3.2