CVE:CVE-2008-4423
CNNVD:CNNVD-200810-040
Ovidentia的index.php中存在SQL注入漏洞，远程攻击者可以通过一个contact modify操作中的item参数来执行任意SQL命令。
solution:Upgrade ovidentia ovidentia to a higher version than 6.6.5,and avoid the version 6.6.5