CVE:CVE-2009-4805
CNNVD:CNNVD-201004-385
EZ-Blog Beta存在多个SQL注入漏洞，当magic_quotes_gpc被停用时，远程攻击者可通过(1)public/view.php的storyid参数，或(2)admin/remove.php的kill参数执行任意SQL命令。
solution:Upgrade will_kraft ez-blog to a higher version than -:beta1,and avoid the version -:beta1