CVE:CVE-2008-2484
CNNVD:CNNVD-200805-349
Xomol CMS 1.20071213版本中的index.php存在SQL注入漏洞。当magic_quotes_gpc被中止时，远程攻击者可以借助邮箱参数，执行任意的SQL指令。
solution:Upgrade xomol xomol_cms to a higher version than 1.20071213,and avoid the version 1.20071213