CVE:CVE-2009-4256
CNNVD:CNNVD-200912-136
AlefMentor中的cource.php存在多个SQL注入漏洞，远程攻击者可以借助一个pregled操作中的(1) cont_id和(2) courc_id参数执行任意SQL指令。
solution:Upgrade truesolution alefmentor to a higher version than 2.0,2.2,and avoid the version 2.0,2.2
solution:Upgrade varnish.projects.linpro varnish to a higher version than 2.0.6,and avoid the version 2.0.6