CVE:CVE-2009-2894
CNNVD:CNNVD-200908-293
Ebay Clone 2009版本存在多个SQL注入漏洞。远程攻击者可以借助到product_desc.php的id参数以及到showcategory.php和gallery.php的CATID参数，来执行任意的SQL指令。
solution:Upgrade clone2009 ebay_clone to a higher version than 2009,and avoid the version 2009