CVE:CVE-2008-4203
CNNVD:CNNVD-200809-349
CzarNews 1.20 及其早期版本的cn_users.php中存在SQL注入漏洞。远程攻击者可以通过一个recook cookie来执行任意SQL命令。
solution:Upgrade czaries czarnews to a higher version than 1.20,1.12,1.13,1.14,and avoid the version (,1.20],1.12,1.13,1.14