CVE:CVE-2007-1550
CNNVD:CNNVD-200703-442
phpx 3.5.15版本中存在多个SQL注入漏洞。远程攻击者可以借助提交到(a)gallery.php的(1)image_id或(2)cat_id参数、到(b)news.php或(c)print.php的(3)news_id参数、到news.php的(4)news_cat_id 参数、到(d)forums.php的(5)cat_id,(6)topic_id或(7)post_id参数、到(e)users.php的(8)user_id参数，执行任意的SQL指令。
solution:Upgrade phpx phpx to a higher version than 3.5.15,and avoid the version (,3.5.15]