CVE:CVE-2007-6058
CNNVD:CNNVD-200711-283
ProfileCMS中的index.php存在多个SQL注入漏洞，远程攻击者借助(1)profile-codes模块的code操作,(2)video-codes模块的videos操作,或(3)the arcade-games模块的games操作的id参数执行任意SQL指令。
solution:Upgrade profilecms profilecms to a higher version than 1.0,and avoid the version (,1.0]