CVE:CVE-2005-4040
CNNVD:CNNVD-200512-098
FileLister 0.51及之前版本存在SQL注入漏洞。远程攻击者可以借助search参数，可能是对definesearch.jsp的searchwhat 参数，执行任意的SQL指令。
solution:Upgrade tawbaware filelister to a higher version than 0.51,and avoid the version (,0.51]