CVE:CVE-2008-1341
CNNVD:CNNVD-200803-234
SP8以前的LaGarde StoreFront 6中的SearchResults.aspx存在SQL注入漏洞。远程攻击者通过CategoryId命令来执行任意SQL命令。
solution:Upgrade lagarde storefront to a higher version than 6.0,and avoid the version 6.0