CVE:CVE-2006-0721
CNNVD:CNNVD-200602-253
RunCMS 1.2和1.3a的pmlite.php中存在SQL注入漏洞。远程攻击者可以借助to_userid参数执行任意SQL命令。
solution:Upgrade runcms runcms to a higher version than 1.2,1.3a,1.3a2,and avoid the version 1.2,1.3a,1.3a2