CVE:CVE-2002-0709
CNNVD:CNNVD-200210-237
SurfControl SuperScout WebFilter的Web Reports Server存在SQL注入漏洞。远程攻击者可以借助SimpleBar.dll以及其他DLL的RunReport选项执行任意SQL查询。
solution:Upgrade surfcontrol superscout_web_filter to a higher version than 3.0,3.0.3,and avoid the version 3.0,3.0.3; Upgrade surfcontrol web_filter to a higher version than 4.0,4.1,and avoid the version 4.0,4.1