CVE:CVE-2006-5629
CNNVD:CNNVD-200610-546
Hotfix的Hosting Controller中存在多个SQL注入漏洞，远程攻击者可以通过(1)DisableForum.asp和(2)enableForum.asp的ForumID参数执行任意SQL命令。
solution:Upgrade hosting_controller hosting_controller to a higher version than 6.1_hotfix_3.2,1.1,1.3,1.4,1.4.1,1.4b,6.1,6.1_hotfix_1.4,6.1_hotfix_1.7,6.1_hotfix_1.9,6.1_hotfix_2.0,6.1_hotfix_2.1,6.1_hotfix_2.2,6.1_hotfix_2.3,6.1_hotfix_2.4,6.1_hotfix_3.1,2002,2002_rc_1,and avoid the version (,6.1_hotfix_3.2],1.1,1.3,1.4,1.4.1,1.4b,6.1,6.1_hotfix_1.4,6.1_hotfix_1.7,6.1_hotfix_1.9,6.1_hotfix_2.0,6.1_hotfix_2.1,6.1_hotfix_2.2,6.1_hotfix_2.3,6.1_hotfix_2.4,6.1_hotfix_3.1,2002,2002_rc_1