CVE:CVE-2009-2034
CNNVD:CNNVD-200906-237
Yogurt 0.3版本的writemessage.php中存在SQL注入漏洞,当register_globals被激活时,远程认证用户可以借助original参数，执行任意SQL指令。
solution:Upgrade ricardo_alexandre_de_oliveira_staudt yogurt to a higher version than 0.3,and avoid the version 0.3