CVE:CVE-2005-4359
CNNVD:CNNVD-200512-399
ODFaq 2.1.0的includes/core.inc.php中存在SQL注入漏洞，远程攻击者可以通过faq.php的(1) cat和(2) srcText参数执行任意SQL命令。
solution:Upgrade oodie odfaq to a higher version than 1.21b,2.1.0,and avoid the version 1.21b,2.1.0