CVE:CVE-2008-3594
CNNVD:CNNVD-200808-143
MagicScripts E-Store是一套电子商务网站系统。
MagicScripts E-Store Kit-1,E-Store Kit-2,E-Store Kit-1 Pro PayPal版本以及E-Store Kit-2 PayPal版本中的viewdetails.php存在SQL注入漏洞。远程攻击者可以利用id参数，执行任意的SQL指令。
solution:Upgrade magicscripts e-store_kit-1 to a higher version than *; Upgrade magicscripts e-store_kit-2 to a higher version than *