CVE:CVE-2010-0948
CNNVD:CNNVD-201003-114
Bigforum的脚本 profil.php存在SQL注入漏洞。当magic_quotes_gpc被禁止时，远程攻击者通过id参数，执行任意SQL命令。
solution:Upgrade bfs.kilu bigforum to a higher version than 4.5,and avoid the version 4.5