CVE:CVE-2006-0608
CNNVD:CNNVD-200602-112
Hinton Design phphd 1.0中存在多个SQL注入漏洞。远程攻击者可以借助(1)指向check.php的username参数或(2)为数据库的显示信息编写脚本的未明攻击向量注入任意SQL命令。
solution:Upgrade hinton_design phphd to a higher version than 1.0,and avoid the version 1.0