CVE:CVE-2007-3190
CNNVD:CNNVD-200706-214
Just For Fun Network Management System (JFFNMS) 的auth.php文件中存在多个SQL注入漏洞。当magic_quotes_gpc被禁用时，远程攻击者可以借助用户和密码参数，执行任意的SQL指令。
solution:Upgrade jffnms just_for_fun_network_management_system to a higher version than 0.8.3,and avoid the version 0.8.3