CVE:CVE-2007-3250
CNNVD:CNNVD-200706-276
Elxis CMS的mod_banners.php中存在SQL注入漏洞。远程攻击者可以借助mb_tracker cookie，执行任意的SQL指令。
solution:Upgrade elxis elxis_cms to a higher version than 2006.1,2006.2,2006.3,2006.4,and avoid the version 2006.1,2006.2,2006.3,2006.4