CVE:CVE-2006-5908
CNNVD:CNNVD-200611-247
Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b中的yans.func.php的login_user函数存在多个SQL注入漏洞，远程攻击者可通过(1)用户名或(2)密码参数来执行任意SQL命令。
solution:Upgrade lucas_rodriguez_san_pedro yet_another_news_system to a higher version than 0.2b,and avoid the version 0.2b