CVE:CVE-2005-1234
CNNVD:CNNVD-200505-357
phpbb-Auction存在多个SQL注入漏洞。远程攻击者可以通过(1)auction_rating.php的u参数或(2)action_offer.php的ar参数，执行任意SQL命令。
solution:Upgrade phpbb_group phpbb-auction to a higher version than 1.0m,1.2m,and avoid the version 1.0m,1.2m