CVE:CVE-2009-2735
CNNVD:CNNVD-200908-100
sun-jester OpenNews 1.0的admin.php中的SQL注入漏洞。 当 magic_quotes_gpc为被激活时，会允许远程攻击者通过用户名参数来执行任一SQL命令。
solution:Upgrade sun-jester opennews to a higher version than 1.0,and avoid the version 1.0