CVE:CVE-2006-0065
CNNVD:CNNVD-200601-011
VEGO Web Forum 1.26及更早版本的(1) functions.php、(2) functions_update.php和(3) functions_display.php中存在SQL注入漏洞，远程攻击者可以通过index.php中的theme_id参数执行任意SQL命令。
solution:Upgrade vego vego_web_forum to a higher version than 1.26,and avoid the version (,1.26]