CVE:CVE-2010-4799
CNNVD:CNNVD-201104-303
当magic_quotes_gpc禁用时，Chipmunk Pwngame 1.0版本中存在多个SQL注入漏洞。远程攻击者可以借助向authenticate.php发送的（1）username和（2）password参数和（3）向pwn.php发送的ID参数执行任意SQL命令。
solution:Upgrade chipmunk-scripts pwngame to a higher version than 1.0,and avoid the version 1.0