CVE:CVE-2006-1109
CNNVD:CNNVD-200603-150
Total Ecommerce 1.0的index.asp中存在SQL注入漏洞，远程攻击者可以通过id参数执行任意SQL命令。注意：尚不清楚本报告是否与一个特定产品有关。
solution:Upgrade totalecommerce totalecommerce to a higher version than 1.0,and avoid the version 1.0