CVE:CVE-2009-2383
CNNVD:CNNVD-200907-131
Related Sites plugin 2.1 for WordPress的BTE_RW_webajax.php存在SQL注入漏洞会允许远程攻击者利用guid参数来执行任意SQL命令。
solution:Upgrade blogtrafficexchange related-sites to a higher version than 2.1,and avoid the version 2.1