CVE:CVE-2010-4916
CNNVD:CNNVD-201110-116
ColdGen ColdUserGroup 1.06版本的index.cfm中存在多个SQL注入漏洞。远程攻击者可借助(1) ArticleID 或者(2) LibraryID参数执行任意代码。
solution:Upgrade coldgen coldusergroup to a higher version than 1.06,and avoid the version 1.06