CVE:CVE-2006-1481
CNNVD:CNNVD-200603-465
在PHP Ticket 0.71的search.php中存在SQL注入漏洞，远程经过身份验证的用户可通过frm_search_in参数执行任意SQL命令和获得用户名和口令。
solution:Upgrade php_ticket php_ticket to a higher version than 0.71,0.5,0.6,and avoid the version (,0.71],0.5,0.6