CVE:CVE-2009-2439
CNNVD:CNNVD-200907-179
Web Development House Alibaba Clone中存在多个SQL注入漏洞。远程攻击者可借助脚本category.php的参数IndustryID和脚本supplier/view_contact_details.php的参数SellerID执行任意SQL命令。
solution:Upgrade web_development_house alibaba_clone to a higher version than *