CVE:CVE-2014-125040
CNNVD:CNNVD-202301-346
DevNewsAggregator是Steve Jagodzinski个人开发者的一个开发新闻聚合器。
DevNewsAggregator存在SQL注入漏洞，该漏洞源于文件php/data_access/RemoteHtmlContentDataAccess.php的函数getByName存在问题，对参数name的操作会导致sql注入。
solution:Upgrade devnewsaggregator_project devnewsaggregator to a higher version than 2014-11-30,and avoid the version (,2014-11-30)