CVE:CVE-2008-3374
CNNVD:CNNVD-200807-465
Gregarius是基于php的RSS聚合器，可以将所设定的源聚合在一起，以HTML或者XML方式输出。
Gregarius的/ajax.php文件中存在多个SQL注入漏洞，允许远程攻击者无需认证便可获得管理凭据。
solution:Upgrade gregarius gregarius to a higher version than 0.5.4,0.2.4,0.3.0,0.3.2,0.3.4,0.3.6,0.3.8,0.4.0,0.4.2,0.5.0,0.5.2,and avoid the version (,0.5.4],0.2.4,0.3.0,0.3.2,0.3.4,0.3.6,0.3.8,0.4.0,0.4.2,0.5.0,0.5.2