CVE:CVE-2010-4915
CNNVD:CNNVD-201110-115
ColdGen ColdBookmarks 1.22版本的index.cfm中存在SQL注入漏洞。远程攻击者可借助EditBookmark操作中的BookmarkID参数执行任意SQL命令。
solution:Upgrade coldgen coldbookmarks to a higher version than 1.22,and avoid the version 1.22