CVE:CVE-2009-2545
CNNVD:CNNVD-200907-296
Advanced Electron Forum 存在SQL注入漏洞，当magic_quotes_gpc被禁用时，远程攻击者可以通过长传附件的文件名执行任意SQL命令。注意：该漏洞的出处未知，相关细节信息由第三方提供。
solution:Upgrade anelectron advanced_electron_forum to a higher version than 1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,and avoid the version 1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8