CVE:CVE-2005-4408
CNNVD:CNNVD-200512-473
Miraserver 1.0 RC4及更早版本存在多个SQL注入漏洞，远程攻击者可以通过到index.php的(1)page参数，到newsitem.php的(2)id参数和到article.php的(3)cat参数来执行任意SQL命令。
solution:Upgrade pc_media miraserver to a higher version than 1.0_rc4,and avoid the version (,1.0_rc4]