CVE:CVE-2006-3270
CNNVD:CNNVD-200606-568
THoRCMS 1.3.1的cms_admin.php中的SQL注入漏洞。远程攻击者通过多个未明参数(如add_link_mid参数)执行任意SQL命令。
solution:Upgrade thorcms thorcms to a higher version than 1.3.1,and avoid the version 1.3.1