CVE:CVE-2007-4918
CNNVD:CNNVD-200709-210
Gelato中的index.php存在SQL注入漏洞，远程攻击者可以借助post参数执行任意SQL指令.
solution:Upgrade gelatocms gelatocms to a higher version than _nil_,0.90,0.95,and avoid the version _nil_,0.90,0.95