CVE:CVE-2008-3151
CNNVD:CNNVD-200807-203
HP-Nuke是一款流行的CGI程序，允许用户创建帐号并提交自己的内容。
PHP-Nuke 4ndvddb 0.91模块中存在SQL注入漏洞。远程攻击者通过一个show_dvd中的id参数来执行任意SQL命令。
solution:Upgrade phpnuke 4ndvddb to a higher version than 0.91,and avoid the version 0.91; Upgrade warpspeed 4ndvddb to a higher version than 0.91,and avoid the version 0.91