CVE:CVE-2006-1638
CNNVD:CNNVD-200604-063
借助于(1)到(a)accounts.php，(b)changep.php，(c)editac.php，(d)feedback.php，(e)fpass.php，(f)login.php，(g)post.php，(h)reply.php，或(i)reply_log.php的Username参数;WebBB 1.2中的多个SQL注入漏洞可让远程攻击者执行任意命令。(2)到(j)dpost.php的p参数；(3)到(k)list.php或(l)ndis.php的c参数;或者(4)到(m)search.php的q参数。
solution:Upgrade aweb_labs awebbb to a higher version than 1.2,and avoid the version 1.2