CVE:CVE-2009-2895
CNNVD:CNNVD-200908-294
Ultimate Regnow Affiliate (URA) 3.0版本中的rss.php存在SQL注入漏洞。远程攻击者可以借助cat参数，执行任意的SQL指令。
solution:Upgrade phpsugar ultimate_regnow_affiliate to a higher version than 3.0,and avoid the version 3.0