CVE:CVE-2009-0279
CNNVD:CNNVD-200901-355
Pardal CMS 0.2.0及之前版本中的comentar.php存在SQL注入漏洞。远程攻击者可以借助id参数，执行任意的SQL指令。
solution:Upgrade pardalcms pardalcms to a higher version than 0.2.0,0.1.1,0.1.2,0.1.3,0.1a,0.01b,0.01c,and avoid the version (,0.2.0],0.1.1,0.1.2,0.1.3,0.1a,0.01b,0.01c