CVE:CVE-2007-0642
CNNVD:CNNVD-200701-574
Raymond BERTHOU脚本收集的tForum 2.00版本(又称RBL - ASP)中存在SQL注入漏洞。远程攻击者可以借助(1)id和(2)对user_confirm.asp的通过，执行任意SQL指令。
solution:Upgrade rbl tforum to a higher version than 2.00,and avoid the version 2.00