CVE:CVE-2007-1974
CNNVD:CNNVD-200704-186
当在Xoops模块，比如(1)Zmagazine ，(2)Happy Linux XFsection中被使用时，WF-Section (又称WF-Sections) 1.0.1的class/wfsarticle.php文件中的getArticle函数存在SQL注入漏洞。远程攻击者可以借助提交到print.php的articleid参数，执行任意的SQL指令。
solution:Upgrade wf-sections wf-sections to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade xoops happy_linux_xfsection_module to a higher version than 1.07,and avoid the version (,1.07]; Upgrade xoops zmagazine_module to a higher version than 1.0,and avoid the version 1.0