CVE:CVE-2005-1822
CNNVD:CNNVD-200506-017
Qualiteam X-Cart 4.0.8版本中存在多个SQL注入漏洞，远程攻击者可通过：(1)提交到home.php的cat参数或(2)printable参数， (3) 到product.php的productid参数或(4)mode参数， (5)注入到error_message.php的id参数， (6)到help.php的section参数， (7)到orders.php的mode参数， (8)到register.php的mode参数， (9)到search.php的mode参数， 或(10)到giftcert.php的gcid参数或(11)gcindex参数，执行任意SQL指令。
solution:Upgrade qualiteam x-cart to a higher version than 4.0.8,and avoid the version 4.0.8