CVE:CVE-2006-0249
CNNVD:CNNVD-200601-177
BitDamaged geoBlog MOD_1.0的viewcat.php中存在SQL注入漏洞，远程攻击者可以通过cat参数($tmpCategory变量)执行任意SQL命令，然后窃取凭证并上传文件。
solution:Upgrade bitdamaged geoblog to a higher version than mod_1.0,and avoid the version mod_1.0