CVE:CVE-2007-1882
CNNVD:CNNVD-200704-079
HP Mercury Quality Center 中的qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment存在SQL注入漏洞。远程认证用户可以借助RunQuery方式，执行任意的SQL指令。
solution:Upgrade hp mercury_quality_center to a higher version than 9.0:build_9.1.0.4352,and avoid the version 9.0:build_9.1.0.4352