CVE:CVE-2010-1583
CNNVD:CNNVD-201005-060
TaskFreak!是一个基于php的GTD工具，它支持多用户使用，可以通过浏览器页面来管理你的项目、日常工作等。
TaskFreak!使用的Tirzen(aka TZN)Framework的tzn_mysql.php的TznDbConnection class中，loadByKey函数存在SQL注入漏洞，远程攻击者可在登录操作时，通过用户名字段执行任意SQL命令。
solution:Upgrade taskfreak taskfreak! to a higher version than 0.6.2,0.1,0.1.2,0.1.3,0.1.4,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.6.0,0.6.1,and avoid the version (,0.6.2],0.1,0.1.2,0.1.3,0.1.4,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.5.3,0.5.4,0.5.5,0.5.6,0.5.7,0.6.0,0.6.1; Upgrade tirzen tirzen_framework to a higher version than 1.5,and avoid the version 1.5