CVE:CVE-2005-1487
CNNVD:CNNVD-200505-973
FishCart 3.1中存在多个SQL注入漏洞，远程攻击者可通过(1)传到upstnt.php的cartid参数和(2)传给display.php的psku参数执行任意SQL命令。
solution:Upgrade fishnet fishcart to a higher version than 3.1,and avoid the version 3.1