CVE:CVE-2010-1046
CNNVD:CNNVD-201003-293
Rostermain的脚本index.php存在多个SQL注入漏洞。远程攻击者可以借助(1) userid (username) 和 (2) password 参数，执行任意的SQL命令。
solution:Upgrade ryan_marshall rostermain to a higher version than 1.1,and avoid the version (,1.1]