CVE:CVE-2006-2697
CNNVD:CNNVD-200605-545
Easy-Content Forums 1.0存在多个SQL注入漏洞，远程攻击者可以借助(1) userview.asp中的startletter参数和(2)topics.asp.中的forumname参数，执行任意SQL命令。
solution:Upgrade easy-content_forums easy-content_forums to a higher version than 1.0,and avoid the version 1.0