CVE:CVE-2005-4478
CNNVD:CNNVD-200512-531
Papoo 2.1.2及更早版本存在多个SQL注入漏洞，远程攻击者可以通过到(a)index.php和(b)guestbook.php的(1)menuid参数以及到(c)print.php的(2) forumid和(3)reporeid_print参数执行任意SQL命令。
solution:Upgrade papoo papoo to a higher version than 2.1.2,and avoid the version (,2.1.2]