CVE:CVE-2010-4854
CNNVD:CNNVD-201110-036
Zuitu 1.6的ajax/coupon.php，在magic_quotes_gpc关闭时存在SQL注入漏洞。远程攻击者可借助comsume操作中的id参数执行任意SQL命令。
solution:Upgrade zuitu zuitu to a higher version than 1.6,and avoid the version 1.6