CVE:CVE-2008-0695
CNNVD:CNNVD-200802-196
BookmarkX script 2007中的index.php存在SQL注入漏洞。远程攻击者借助showtopic操作中的topicid参数执行任意的SQL指令。
solution:Upgrade bookmarkx script to a higher version than 2007,and avoid the version 2007