CVE:CVE-2005-4606
CNNVD:CNNVD-200512-685
多个Web Wiz产品，含(1)Site News 3.06及更早版本，(2)Journal 1.0及更早版本，(3)Polls 3.06及更早版本和(4)Database Login 1.71及更早版本，中的check_user.asp存在SQL注入漏洞， 远程攻击者可以通过txtUserName参数来执行任意SQL命令。
solution:Upgrade webwiz database_login to a higher version than 1.71,and avoid the version (,1.71]; Upgrade webwiz journal to a higher version than 1.0,and avoid the version (,1.0]; Upgrade webwiz site_news to a higher version than 3.06,2.00,and avoid the version (,3.06],2.00; Upgrade webwiz weekly_poll to a higher version than 3.06,and avoid the version (,3.06]