CVE:CVE-2009-1731
CNNVD:CNNVD-200905-246
MLFFAT 2.1版本的panel/index.php中存在SQL注入漏洞。远程攻击者执行可以借助一个base64-encoded supervisor cookie,任意SQL指令。
solution:Upgrade mlffat mlffat to a higher version than 2.1,and avoid the version 2.1