CVE:CVE-2007-1779
CNNVD:CNNVD-200703-676
Advanced Website Creator (AWC) 1.9.0之前版本的MySQL后端中存在多个SQL注入漏洞。远程攻击者可以借助与对mysql_escape_string而非mysql_real_escape_string的使用相关的未明参数，执行任意的SQL指令。
solution:Upgrade advanced_website_creator advanced_website_creator to a higher version than 0.1,0.2,0.3,1.0_beta_1,1.1_beta_1,1.2,1.3,1.4.1,1.4.2,1.5.0,1.6.0,1.6.1,1.7.0,1.8.0,1.8.1,and avoid the version 0.1,0.2,0.3,1.0_beta_1,1.1_beta_1,1.2,1.3,1.4.1,1.4.2,1.5.0,1.6.0,1.6.1,1.7.0,1.8.0,1.8.1