CVE:CVE-2011-4710
CNNVD:CNNVD-201112-125
Pixie CMS 1.01到1.04版本中存在多个SQL注入漏洞。远程攻击者可借助默认的URI请求中的(1)pixie_user参数和(2) Referer HTTP头执行任意SQL命令。
solution:Upgrade getpixie pixie to a higher version than 1.01,1.01a,and avoid the version 1.01,1.01a; Upgrade lucidcrew pixie to a higher version than 1.02,1.03,1.04,and avoid the version 1.02,1.03,1.04