CVE:CVE-2010-2716
CNNVD:CNNVD-201007-134
PsNews 1.3版本中存在多个SQL注入漏洞。远程攻击者可以借助(1) ndetail.php 和 (2) print.php的id参数执行任意的SQL命令。
solution:Upgrade rich_kavanagh psnews to a higher version than 1.3,and avoid the version 1.3