CVE:CVE-2009-1851
CNNVD:CNNVD-200906-017
phpBugTracker 1.0.4版本及其早期版本的include.php中存在SQL注入漏洞。远程攻击者可以借助用户参数 ，执行任意SQL指令。
solution:Upgrade benjamin_curtis phpbugtracker to a higher version than 1.0.4,0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.1.7,0.2.0,0.2.1,0.3.0,0.3.1,0.3.2,0.3.3,0.4.0,0.5.0,0.5.1,0.6.0,0.6.1,0.6.2,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,0.9.0,0.9.1,1.0,1.0.1,1.0.3,1.x:dev1,and avoid the version (,1.0.4],0.1.0,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.1.7,0.2.0,0.2.1,0.3.0,0.3.1,0.3.2,0.3.3,0.4.0,0.5.0,0.5.1,0.6.0,0.6.1,0.6.2,0.7.0,0.7.1,0.7.2,0.8.0,0.8.1,0.8.2,0.9.0,0.9.1,1.0,1.0.1,1.0.3,1.x:dev1