CVE:CVE-2006-6067
CNNVD:CNNVD-200611-374
20/20 DataShed (又称 SitesOutlet E-commerce Kit-1 PayPal Edition存在多个SQL注入漏洞)存在多个SQL注入漏洞，远程攻击者可以通过传给(a)f-email.asp的(1)itemID参数，或者传给(b)listings.asp的(2)peopleID和(2)sort_order参数。是不同于CVE-2006-5955的向量。
solution:Upgrade 20_20_applications 20_20_datashed to a higher version than 1.0,and avoid the version 1.0