CVE:CVE-2006-1817
CNNVD:CNNVD-200604-263
当禁用magic_quotes_gpc时，warforge.NEWS 1.0中的authcheck.php中的SQL注入漏洞允许远程攻击者借助于参数(1)authusername及可能的(2)authpassword cookie执行任意SQL命令。
solution:Upgrade the_war_forge warforge.news to a higher version than 1.0,and avoid the version 1.0
solution:Upgrade phpbb_group phpbb to a higher version than 2.0.9,and avoid the version 2.0.9