CVE:CVE-2007-6217
CNNVD:CNNVD-200712-019
Irola My-Time (又称Timesheet)中的login.asp存在多个SQL注入漏洞，远程攻击者可以借助(1)注册(又称Username)和(2)密码参数执行任意SQL指令。
solution:Upgrade irola my-time to a higher version than 3.5,and avoid the version 3.5