CVE:CVE-2006-2857
CNNVD:CNNVD-200606-147
LifeType 1.0.4的index.php中存在SQL注入漏洞，远程攻击者可通一个ViewArticle操作(viewarticleaction.class.php)中的articleId参数执行任意SQL命令。
solution:Upgrade lifetype lifetype to a higher version than 1.0.2,1.0.3,1.0.4,and avoid the version 1.0.2,1.0.3,1.0.4