CVE:CVE-2008-1957
CNNVD:CNNVD-200804-371
Tr Script News 2.1的news.php中存在SQL注入漏洞。远程攻击者通过voir DOS命令的nb参数来执行任意SQL命令。
solution:Upgrade easyscripts tr_script_news to a higher version than 2.1,and avoid the version 2.1