CVE:CVE-2005-3881
CNNVD:CNNVD-200511-477
AtlantisFAQ Knowledge Base是一款基于PHP的小型的知识库程序。
AtlantisFAQ Knowledge Base Software 2.03及更早版本的search.php存在SQL注入漏洞，可让远程攻击者通过searchStr参数执行任意SQL命令。
solution:Upgrade altantisfaq altantis_knowledge_base_software to a higher version than 2.03,and avoid the version (,2.03]