CVE:CVE-2006-1613
CNNVD:CNNVD-200604-035
aWebNews 1.0中存在多SQL注入漏洞，可让远程攻击者通过(1)login.php或fpass.php中的user123变量或visview.php中的cid参数执行任意的SQL命令。
solution:Upgrade aweb_labs awebnews to a higher version than 1.0,and avoid the version 1.0