CVE:CVE-2006-1232
CNNVD:CNNVD-200603-251
DSDownload 1.0中存在多个SQL注入漏洞，当magic_quotes_gpc 无效时，远程攻击者可通过以下途径执行任意SQL命令：用于(a) search.php和(b) downloads.php中的(1) key 和(2) category参数。
solution:Upgrade dsportal dsdownload to a higher version than 1.0,and avoid the version 1.0