CVE:CVE-2009-4456
CNNVD:CNNVD-200912-395
Green Desktiny的news_detail.php中存在SQL注入漏洞。远程攻击者借助id参数执行任意SQL指令。
solution:Upgrade greendesktiny green_desktiny to a higher version than 2.3.1,and avoid the version 2.3.1