CVE:CVE-2012-3791
CNNVD:CNNVD-201206-396
Simple Web Content Management System 1.1版本中存在多个SQL注入漏洞。远程攻击者可利用这些漏洞通过id参数到：(1)item_delete.php，(2)item_status.php，(3)item_detail.php，(4)item_modify.php，(5)在admin/中的item_position.php或(6)状态参数到admin/item_status.php，执行任意SQL命令。
solution:Upgrade cms-center simple_web_content_management_system to a higher version than 1.1,and avoid the version 1.1