CVE:CVE-2009-5090
CNNVD:CNNVD-201109-114
当magic_quotes_gpc禁用时，Bloggeruniverse Beta 2版本的editcomments.php中存在SQL注入漏洞。远程攻击者可借助id参数和其他未明向量执行任意SQL命令。
solution:Upgrade daman371 bloggeruniverse to a higher version than *:beta2,and avoid the version *:beta2