CVE:CVE-2005-4001
CNNVD:CNNVD-200512-053
phpYellowTM Pro Edition和Lite Edition 5.33存在多个SQL注入漏洞。远程攻击者可以借助(1)对search_result.php的haystack参数或(2)对 print_me.php的ckey参数，执行任意SQL指令。
solution:Upgrade phpyellow phpyellowtm_lite to a higher version than 5.33,and avoid the version 5.33; Upgrade phpyellow phpyellowtm_pro to a higher version than 5.33,and avoid the version 5.33