CVE:CVE-2006-4957
CNNVD:CNNVD-200609-398
MyReview 1.9.4的functions.php中GetMember函数内存在SQL注入漏洞，远程攻击者可以通过Admin.php的email参数执行任意SQL命令。
solution:Upgrade the_myreview_system myreview to a higher version than 1.9.4,and avoid the version 1.9.4