CVE:CVE-2006-6911
CNNVD:CNNVD-200612-641
Digitizing Quote和Ordering System 1.0中的search.asp存在SQL注入漏洞，远程认证用户可以通过ordernum参数来执行任意SQL命令。
solution:Upgrade digitizing_quote_and_ordering_system digitizing_quote_and_ordering_system to a higher version than 1.0,and avoid the version 1.0