CVE:CVE-2008-0739
CNNVD:CNNVD-200802-212
CandyPress (CP)的admin/SA_shipFedExMeter.asp存在SQL注入漏洞。远程攻击者可以借助FedExAccount参数执行任意的SQL指令。
solution:Upgrade shoppingtree candypress_store to a higher version than 4.1,4.1.1.26,and avoid the version (,4.1],4.1.1.26