CVE:CVE-2008-4590
CNNVD:CNNVD-200810-287
Stash存在多个SQL注入漏洞。远程攻击者可以通过admin/login.php的username参数和admin/news.php的post参数来执行任意SQL命令。
solution:Upgrade stash stash to a higher version than 1.0.3,and avoid the version 1.0.3