CVE:CVE-2008-1907
CNNVD:CNNVD-200804-326
cpCommerce 1.1.0的functions/display_page.func.php中存在多个SQL注入漏洞。远程攻击者通过(1) id_product, (2) id_manufacturer, and (3) id_category 参数到达未明组件，以执行任意SQL命令。
solution:Upgrade cpcommerce cpcommerce to a higher version than 1.1.0,and avoid the version 1.1.0