CVE:CVE-2005-3518
CNNVD:CNNVD-200511-139
PunBB是一个快速，轻量级PHP论坛系统。
PunBB 1.2.7和1.2.8的search.php中的SQL注入漏洞，可让远程攻击者通过old_searches参数执行任意SQL命令。
solution:Upgrade punbb punbb to a higher version than 1.2.7,1.2.8,and avoid the version 1.2.7,1.2.8