CVE:CVE-2006-2879
CNNVD:CNNVD-200606-165
Alex News-Engine 1.5.0 及早期版本的newscomments.php中存在SQL注入漏洞，远程攻击者可借助newsid参数执行任意SQL命令。
solution:Upgrade alex news-engine to a higher version than 1.5.0,and avoid the version (,1.5.0]