CVE:CVE-2008-1860
CNNVD:CNNVD-200804-276
LokiCMS 0.3.3 及其早期版本的admin.php中存在统计代码注入漏洞，远程攻击者通过默认参数来向includes/Config.php注入任意代码。
solution:Upgrade lokicms lokicms to a higher version than 0.3.3,0.1.0,0.1.0rc1,0.2.0,0.3.0,0.3.1b1,0.3.1b2,0.3.2b1,and avoid the version (,0.3.3],0.1.0,0.1.0rc1,0.2.0,0.3.0,0.3.1b1,0.3.1b2,0.3.2b1