CVE:CVE-2008-5166
CNNVD:CNNVD-200811-325
Riddles Website 的riddle.php中存在SQL注入漏洞。远程攻击者可以借助riddleid参数来执行任意SQL指令。
solution:Upgrade easysitenetwork riddles_website to a higher version than 1.2.1,and avoid the version 1.2.1