CVE:CVE-2009-4925
CNNVD:CNNVD-201007-088
Portale e-commerce Creasito (又称 creasito e-commerce content manager) 1.3.16版本中存在多个SQL注入漏洞。当magic_quotes_gpc被禁止时，远程攻击者可以借助(1) admin/checkuser.php和(2) checkuser.php的username参数执行任意的SQL命令。
solution:Upgrade creasito creasito_e-commerce_content_manager to a higher version than 1.3.16,and avoid the version 1.3.16