CVE:CVE-2009-0110
CNNVD:CNNVD-200901-099
RiotPix是一个开源，标准兼容的网络论坛系统。
RiotPix 0.61以及之前的版本中的read.php存在SQL注入漏洞。远程攻击者可以借助forumid参数，执行任意的SQL指令。
solution:Upgrade riotpix riotpix to a higher version than 0.61,.05,0.5,0.51:beta,0.52,0.60,and avoid the version (,0.61],.05,0.5,0.51:beta,0.52,0.60