CVE:CVE-2008-0611
CNNVD:CNNVD-200802-078
XOOPS RMSOFT Gallery System module 2.0中的rmgs/images.php中的SQL注入漏洞允许远程攻击者借助ID参数执行任意的SQL命令。
solution:Upgrade rmsoft gallery_system to a higher version than 2.0,and avoid the version 2.0; Upgrade xoops xoops to a higher version than *