CVE:CVE-2009-3321
CNNVD:CNNVD-200909-430
SaphpLesson 4.3版本中存在SQL注入漏洞。当magic_quotes_gpc被禁用时，远程攻击者可以借助CLIENT_IP HTTP 头，执行任意的SQL指令。
solution:Upgrade saphplesson saphplesson to a higher version than 4.3,and avoid the version 4.3