CVE:CVE-2008-6760
CNNVD:CNNVD-200904-508
ViArt Shop(又称Shopping Cart)3.5版本允许远程攻击者借助对cart_save.php中的shopping cart进行的未经过鉴定的添加和保存操作，获得敏感信息。添加和保存操作会在出错信息中显示SQL制表名。
solution:Upgrade viart viart_shop to a higher version than 3.5,and avoid the version 3.5