CVE:CVE-2010-3481
CNNVD:CNNVD-201009-229
ApPHP PHP MicroCMS 1.0.1版本中的login.php文件中存在多个SQL注入漏洞。当magic_quotes_gpc禁用时，远程攻击者可以借助(1)user_name和(2)password变量来执行任意SQL命令。
solution:Upgrade apphp php_microcms to a higher version than 1.0.1,and avoid the version 1.0.1