CVE:CVE-2008-2012
CNNVD:CNNVD-200804-430
PostNuke PostSchedule 1.0模块的index.php中存在SQL注入漏洞。远程攻击者通过一个事件操作中的eid参数来执行任一SQL命令。
solution:Upgrade postnuke_software_foundation postschedule to a higher version than 1.0,and avoid the version 1.0
solution:Upgrade mx-system mxbb_portal to a higher version than 2.7.3,and avoid the version 2.7.3