CVE:CVE-2010-1049
CNNVD:CNNVD-201003-296
Uiga Business Portal存在多个SQL注入漏洞。远程攻击者可以借助(1)脚本blog/index.php的noentryid参数和(2)脚本index2.php的p参数，执行任意的SQL指令。
solution:Upgrade uiga business_portal to a higher version than *