CVE:CVE-2007-6557
CNNVD:CNNVD-200712-337
MeGaCheatZ中存在多个SQL注入漏洞，远程攻击者执可以借助一下文件的Itemid参数行任意SQL指令：(1) comments.php,(2)view.php,(3)siteadmin/ViewItem.php,以及其它未明向量。
solution:Upgrade megacheatz megacheatz to a higher version than 1.1,and avoid the version 1.1