CVE:CVE-2006-3691
CNNVD:CNNVD-200607-295
VBZooM 1.11及之前版本存在多个SQL注入漏洞。远程攻击者可以借助对(1) ignore-pm.php, (2) sendmail.php, (3) reply.php或(4) sub-join.php的UserID参数，执行任意SQL指令。
solution:Upgrade vbzoom vbzoom to a higher version than 1.11,and avoid the version (,1.11]