CVE:CVE-2008-6077
CNNVD:CNNVD-200902-124
LoudBlog是一款内容管理系统(CMS)。                         
LoudBlog 0.8.0a及之前版本中的loudblog/ajax.php存在SQL注入漏洞。远程认证用户可以借助singleread操作中的colpick参数，执行任意的SQL指令。
solution:Upgrade loudblog loudblog to a higher version than 0.8.0a,0.5,0.6,0.7,0.8.0,and avoid the version (,0.8.0a],0.5,0.6,0.7,0.8.0