CVE:CVE-2010-1498
CNNVD:CNNVD-201004-401
Claus van Beek dl_stats存在多个SQL注入漏洞，远程攻击者可以通过(1)download.php和(2)view_file.php的id参数执行任意SQL命令。
solution:Upgrade clausvb dl_stats to a higher version than 1.2,and avoid the version (,1.2]