The remote host is missing an update to the system as announced in the referenced advisory.

Update your system with the appropriate patches or software upgrades. http://secunia.com/advisories/19699/ http://secunia.com/advisories/17418/ http://www.vuxml.org/freebsd/116b0820-d59c-11da-8098-00123ffe8333.html

The following package is affected: lifetype CVE-2006-0146 The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, and (4) Cacti, (5) Xaraya, (6) PHPOpenChat, and (7) MAXdev MD-Pro, and when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL statements via the sql parameter.