CVE:CVE-2008-4487
CNNVD:CNNVD-200810-113
Atarone CMS的ap-save.php中存在SQL注入漏洞，远程攻击者可以通过site_name,email,theme_chosen,hp,c_meta,id, 和c_js parameters 参数们来执行任意SQL命令。
solution:Upgrade atarone atarone to a higher version than 1.2.0,and avoid the version 1.2.0