CVE:CVE-2009-4933
CNNVD:CNNVD-201007-096
EZ Webitor的login.php中存在多个SQL注入漏洞。远程攻击者可以借助(1) txtUserId (Username) 和 (2) txtPassword (Password) 参数执行任意的SQL命令。
solution:Upgrade winterwebs ezwebitor to a higher version than *