CVE:CVE-2010-1053
CNNVD:CNNVD-201003-300
Zen Time Tracking存在多个SQL注入漏洞。当magic_quotes_gpc被禁止时，远程攻击者可以借助脚本的userlogin.php和managerlogin.php的参数username和password，执行任意的SQL命令。
solution:Upgrade zentracking zen_time_tracking to a higher version than 2.2,and avoid the version (,2.2]