emlog album plug-in kl_album_ajax_do.php SQL injection vulnerability

Fromhttp://www.leavesongs.com/PENETRATION/emlog-important-plugin-getshell.html Check EM album plug-in source code, 看到klalbumajaxdo.php to: query"INSERT INTO ". DBPREFIX."klalbumtruename, fi...