CVE:CVE-2009-4872
CNNVD:CNNVD-201005-145
Logoshows BBS的globepersonnel_login.asp存在多个SQL注入漏洞，远程攻击者可以通过(1)username字段，和(2)password字段执行任意SQL命令。
solution:Upgrade logoshows logoshows_bbs to a higher version than 2.0,and avoid the version 2.0