CVE:CVE-2007-0759
CNNVD:CNNVD-200702-076
EasyMoblog 0.5.1版本中存在多个SQL注入漏洞。远程攻击者可以借助(1)i或(2)对add_comment.php的post_id参数，该参数会引起对libraries.inc.php的注入；或(3)对list_comments.php的i参数,该参数会触发对libraries.inc.php的注入，执行任意SQL指令。
solution:Upgrade umberto_caldera easymoblog to a higher version than 0.5.1,and avoid the version 0.5.1