CVE:CVE-2008-6078
CNNVD:CNNVD-200902-125
Limbo CMS Private Messaging(com_privmsg)组件中的open.php存在SQL注入漏洞。远程攻击者可以借助对index.php的pms参数中的id参数，执行任意的SQL指令。
solution:Upgrade limbo_cms com_privmsg to a higher version than *