CVE:CVE-2006-1978
CNNVD:CNNVD-200604-402
FlexBB 0.5.5及早期版本中的inc/start.php存在SQL注入漏洞。这使得远程攻击者可以借助于flexbb_username COOKIE参数执行任意SQL命令。
solution:Upgrade flexbb flexbb to a higher version than 0.5.5,and avoid the version (,0.5.5]