CVE:CVE-2009-1842
CNNVD:CNNVD-200906-008
Francisco Burzi PHP-Nuke 8.0版本的main/tracking/userLog.php中存在SQL注入漏洞。远程攻击者可以借助HTTP Referer头，执行任意SQL指令。
solution:Upgrade phpnuke php-nuke to a higher version than 8.0,and avoid the version 8.0