CVE:CVE-2008-2916
CNNVD:CNNVD-200806-419
Pre ADS Portal存在多个SQL注入漏洞,在magic_quotes_gpc无效时, 远程攻击者可以通过(1) 对showcategory.php的cid参数 和 (2)对software-description.php id参数，来执行任意SQL命令。
solution:Upgrade preprojects pre_ads_portal to a higher version than 2.0,and avoid the version (,2.0]