CVE:CVE-2008-1295
CNNVD:CNNVD-200803-187
Gregory Kokanosky (aka Greg's Place) phpMyNewsletter中的archives.php存在的SQL注入漏洞。远程攻击者通过msg_id参数执行任意SQL命令。
solution:Upgrade gregory_kokanosky phpmynewsletter to a higher version than 0.8_beta_5,and avoid the version (,0.8_beta_5]