CVE:CVE-2007-4173
CNNVD:CNNVD-200708-091
Hunkaray Okul Portali 1.1版本的duyuruoku.asp中存在SQL注入漏洞。远程攻击者可以借助id参数,执行任意SQL指令。该漏洞不同于CVE-2007-3080。
solution:Upgrade hunkaray_okul portaly to a higher version than 1.1,and avoid the version 1.1