CVE:CVE-2010-5001
CNNVD:CNNVD-201111-041
esoftpro Online Contact Manager 3.0版本的view.php中存在SQL注入漏洞。远程攻击者可借助id参数执行任意SQL命令。
solution:Upgrade esoftpro online_contact_manager to a higher version than 3.0,and avoid the version 3.0