CVE:CVE-2008-6274
CNNVD:CNNVD-200902-567
FamilyProject 2.0版本的index.php中存在多个SQL注入漏洞。远程攻击者可以借助(1)logmbr参数(又称登陆字段)或(2)mdpmbr参数(又称pass 或"Mot de passe"字段)，执行任意SQL指令。
solution:Upgrade mjcreation familyproject to a higher version than 2.0,and avoid the version 2.0