CVE:CVE-2006-0372
CNNVD:CNNVD-200601-287
BlogPHP可能是1.0版的config.php中存在多个SQL注入漏洞，远程攻击者可以通过cookie中的(1) blogphp_username或(2) blogphp_password参数执行任意SQL命令。
solution:Upgrade insane_visions blogphp to a higher version than 1.0,and avoid the version 1.0