CVE:CVE-2008-0683
CNNVD:CNNVD-200802-184
WordPress ShiftThis Newsletter (st_newsletter) 插件的shiftthis-preview.php存在SQL注入漏洞。远程攻击者通过newsletter参数来执行任意SQL命令。
solution:Upgrade wordpress st_newsletter_plugin to a higher version than *