CVE:CVE-2008-0737
CNNVD:CNNVD-200802-210
CandyPress (CP)的admin/utilities_ConfigHelp.asp中的SQL注入漏洞允许远程攻击者借助helpfield参数执行任意的SQL指令。
solution:Upgrade shoppingtree candypress_store to a higher version than 4.1,4.1.1.26,and avoid the version 4.1,4.1.1.26