CVE:CVE-2009-2361
CNNVD:CNNVD-200907-109
OsTicket 1.6 RC5之前的版本下的include/class.staff.ph存在SQL注入漏洞，允许远程攻击者借助全体用户名参数执行任意的SQL命令。
solution:Upgrade osticket osticket to a higher version than *:rc4,1.6:rc1,1.6:rc2,1.6:rc3,and avoid the version *:rc4,1.6:rc1,1.6:rc2,1.6:rc3