CVE:CVE-2010-0710
CNNVD:CNNVD-201002-275
ASPCode CMS的脚本default.asp存在SQL注入漏洞。当sec参数的赋值是26时，远程攻击者可以借助newsid参数，执行任意的SQL命令。
solution:Upgrade aspcodecms aspcode_cms to a higher version than 1.5.8,2.0.0,and avoid the version 1.5.8,2.0.0