CVE:CVE-2008-0856
CNNVD:CNNVD-200802-380
e-Vision CMS存在多个SQL注入漏洞。远程攻击者可以通过(1) iframe.PHP 以及 (2) print.PHP的id参数来执行任意SQL命令。
solution:Upgrade e-vision e-vision_cms to a higher version than 2.02,and avoid the version 2.02