CVE:CVE-2006-0750
CNNVD:CNNVD-200602-257
适用于Invision Power Board (IPB)的supersmashbrothers (SSB) Army System 2.1.0的army.php中存在SQL注入漏洞。远程攻击者可以借助对index.php的批操作中的userstat参数执行任意SQL命令。
solution:Upgrade supersmashbrothers army_system to a higher version than 2.1.0_for_ipb,and avoid the version 2.1.0_for_ipb