CVE:CVE-2006-1042
CNNVD:CNNVD-200603-080
Gregarius 0.5.2存在多个SQL注入漏洞。远程攻击者可以通过(1)传给feed.php的folder参数或(2)传给search.php的rss_query参数，执行任意SQL命令。
solution:Upgrade gregarius gregarius to a higher version than 0.5.2,and avoid the version 0.5.2