CVE:CVE-2006-4673
CNNVD:CNNVD-200609-144
PHP-Fusion 6.01.4及更早版本的maincore.php中存在全局变量覆盖漏洞，对superglobals使用extract函数，远程攻击者可以通过news.php的_SERVER[REMOTE_ADDR]参数执行SQL注入攻击。
solution:Upgrade php_fusion php_fusion to a higher version than 6.01.4,6.0.105,6.0.106,6.0.107,6.0.109,6.0.110,6.0.204,6.0.206,6.0.303,6.0.304,6.0.306,6.0.307,and avoid the version (,6.01.4],6.0.105,6.0.106,6.0.107,6.0.109,6.0.110,6.0.204,6.0.206,6.0.303,6.0.304,6.0.306,6.0.307