CVE:CVE-2006-2763
CNNVD:CNNVD-200606-019
Pre News Manager 1.0存在多个SQL注入漏洞。远程攻击者可以借助对(a)index.php的(1)id参数, 和对(b)news_detail.php, (c)email_story.php, (d)thankyou.php, (e)printable_view.php, (f)tella_friend.php和(g)send_comments.php的(2)nid参数，执行任意SQL命令。
solution:Upgrade pre_projects pre_news_manager to a higher version than 1.0,and avoid the version 1.0