CVE:CVE-2006-6200
CNNVD:CNNVD-200611-494
Francisco Burzi PHP-Nuke中的News模块中的modules/News/index.php内的(1)rate_article和(2)rate_complete函数存在多个SQL注入漏洞，当系统禁用magic_quotes_gpc时，远程攻击者可通过sid参数来执行任意SQL命令。
solution:Upgrade francisco_burzi php-nuke to a higher version than 7.0,7.0_final,7.1,7.2,7.3,7.4,7.5,7.6,7.7,7.8,7.8_patched_3.2,7.9,and avoid the version 7.0,7.0_final,7.1,7.2,7.3,7.4,7.5,7.6,7.7,7.8,7.8_patched_3.2,7.9