CVE:CVE-2012-6504
CNNVD:CNNVD-201204-528
PHP Volunteer Management 1.0.2版本中的mods/hours/data/get_hours.php脚本中存在SQL注入漏洞。通过id参数，远程攻击者利用该漏洞执行任意SQL命令。
solution:Upgrade shawn_bradley php_volunteer_management to a higher version than 1.0.2,and avoid the version 1.0.2