CVE:CVE-2005-3363
CNNVD:CNNVD-200510-268
Saphp Lesson，可能是saphp Lesson1.1和saphpLesson2.0当中存在SQL注入漏洞。远程攻击者可以借助(1)showcat.php和(2)add.php中的forumid参数，执行任意SQL指令。
solution:Upgrade saphp saphplesson to a higher version than 1.1,2.0,and avoid the version 1.1,2.0