CVE:CVE-2006-3959
CNNVD:CNNVD-200608-022
X-Scripts X-Protection 1.10的protect.php脚本存在SQL注入漏洞，如禁用magic_quotes_gpc函数，远程攻击者可借助(1)用户名和(2)密码参数执行任意SQL指令。
solution:Upgrade x-scripts x-statistics to a higher version than 1.10,and avoid the version 1.10