CVE:CVE-2006-0234
CNNVD:CNNVD-200601-169
microBlog 2.0 RC-10的index.php中存在SQL注入漏洞，远程攻击者可以通过(1) month和(2) year参数执行任意SQL命令。
solution:Upgrade microblog microblog to a higher version than 2.0_rc10,and avoid the version 2.0_rc10