CVE:CVE-2008-1406
CNNVD:CNNVD-200803-338
eXV2 MyAnnonces 1.8 模块的annonces-p-f.php中的SQL注入漏洞。远程攻击者通过一个ImprAnn操作中的lid参数来执行任意SQL命令。
solution:Upgrade exv2 exv2 to a higher version than 1.8,and avoid the version 1.8