CVE:CVE-2009-4947
CNNVD:CNNVD-201007-219
Q2 Solutions ConnX 4.0.20080606中frmLoginPwdReminderPopup.aspx存在SQL注入漏洞。远程攻击者可以借助txtEmail参数执行任意SQL命令。
solution:Upgrade q2solutions connx to a higher version than 4.0.20080606,and avoid the version 4.0.20080606