CVE:CVE-2005-3963
CNNVD:CNNVD-200512-013
DotClear 1.2.3 之前版本的session.php中存在SQL注入漏洞。远程攻击者可以通过cookie中的dc_xd参数执行任意SQL指令。
solution:Upgrade dotclear dotclear to a higher version than 1.2.1,1.2.2,and avoid the version 1.2.1,1.2.2