CVE:CVE-2009-2604
CNNVD:CNNVD-200907-376
Zen Help Desk 2.1中的adminlogin.asp存在多个SQL注入漏洞，允许远程攻击者借助对admin.asp的(1)用户ID(又称用户名username)参数，(2)密码参数执行任意的SQL指令。
solution:Upgrade zenhelpdesk zen_help_desk to a higher version than 2.1,and avoid the version 2.1