CVE:CVE-2017-15986
CNNVD:CNNVD-201710-1294
CPA Lead Reward Script是一款社会调查脚本。
CPA Lead Reward Script中存在SQL注入漏洞。远程攻击者可借助‘username’参数利用该漏洞注入SQL命令。
solution:Upgrade cpa_lead_reward_script_project cpa_lead_reward_script to a higher version than -