CVE:CVE-2009-1245
CNNVD:CNNVD-200904-111
CCCP Community Clan Portal Pastebin 2.80之前版本中的php/cccp-admin/inc/functions.php里的insert_to_pastebin函数存在多个SQL注入漏洞。远程攻击者可以借助到php/cccp-pages/submit.php的(1)subject，(2)语言和(3)昵称参数，执行任意的SQL指令。
solution:Upgrade cccp-common-clan-portal-pasterbin cccp_pastebin to a higher version than 2.70,2.10,2.20,2.30,2.40,2.50,2.60,and avoid the version (,2.70],2.10,2.20,2.30,2.40,2.50,2.60