CVE:CVE-2005-4020
CNNVD:CNNVD-200512-091
Widget Imprint 1.0.26及之前版本的create.php存在SQL注入漏洞。远程攻击者可以借助product_id 参数，执行任意的SQL指令。
solution:Upgrade widget_press widget_imprint to a higher version than 1.0.26,and avoid the version (,1.0.26]