Owl Intranet引擎SQL注入漏洞

Owl Intranet Engine是一款基于PHP的开放源代码的发表文件/文档的知识库系统。 Owl Intranet Engine不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可以获得敏感信息。 问题是'lib/owl.lib.php'脚本对用户提交的WEB参数缺少过滤，提交恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Owl Owl Intranet Engine 0.80 Owl Owl Intranet Engine 0.73 Owl Owl Intranet Engine 0.72 Owl Owl Intranet Engine 0.71 Owl Owl Intranet Engine 0.9 Owl Owl Intranet Engine 0.7 Owl Owl Intranet Engine 0.6 Owl Owl Intranet Engine 0.82 升级到Owl Intranet Engine 0.91版本： Owl Owl Intranet Engine 0.82 * Owl Owl-0.91.tar.gz <a href="http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download" target="_blank">http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download</a> Owl Owl Intranet Engine 0.6 * Owl Owl-0.91.tar.gz <a href="http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download" target="_blank">http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download</a> Owl Owl Intranet Engine 0.7 * Owl Owl-0.91.tar.gz <a href="http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download" target="_blank">http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download</a> Owl Owl Intranet Engine 0.71 * Owl Owl-0.91.tar.gz <a href="http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download" target="_blank">http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download</a> Owl Owl Intranet Engine 0.72 * Owl Owl-0.91.tar.gz <a href="http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download" target="_blank">http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download</a> Owl Owl Intranet Engine 0.73 * Owl Owl-0.91.tar.gz <a href="http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download" target="_blank">http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download</a> Owl Owl Intranet Engine 0.80 * Owl Owl-0.91.tar.gz <a href="http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download" target="_blank">http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download</a> Owl Owl Intranet Engine 0.9 * Owl Owl-0.91.tar.gz <a href="http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download" target="_blank">http://prdownloads.sourceforge.net/owl/Owl-0.91.tar.gz?download</a>