CVE:CVE-2008-3291
CNNVD:CNNVD-200807-381
Aprox CMS Engine 是一款内容管理系统软件。
AproxEngine (又称 Aprox CMS Engine) 5.1.0.4的index.php中存在SQL注入漏洞。远程攻击者通过id参数来执行任意SQL命令。
solution:Upgrade aprox aprox_cms_engine to a higher version than 5.1.0.4,and avoid the version 5.1.0.4; Upgrade aprox aproxengine to a higher version than 5.1.0.4,and avoid the version 5.1.0.4