CVE:CVE-2006-0068
CNNVD:CNNVD-200601-001
Primo Cart 1.0及更早版本中的SQL注入漏洞，可让远程攻击者通过(1) search.php的q参数和(2) user.php的email参数执行任意SQL命令。
solution:Upgrade primo_place primo_cart to a higher version than 1.0,and avoid the version (,1.0]