CVE:CVE-2010-0458
CNNVD:CNNVD-201001-288
NetArt Media Blog System 1.5版本中存在多个SQL注入漏洞。远程攻击者可借助向index.php log.php传送的cat参数和向blog.php传送的note参数，执行任意SQL命令。
solution:Upgrade netartmedia blog_system to a higher version than 1.5,and avoid the version 1.5