CVE:CVE-2010-2691
CNNVD:CNNVD-201007-113
2daybiz Custom T-Shirt Design Script中存在多个SQL注入漏洞。远程攻击者可以借助(1)products_details.php的sbid 参数，(2)products/products.php的pid参数，(3)designview.php的designid参数执行任意的SQL命令。
solution:Upgrade 2daybiz custom_t-shirt_design_script to a higher version than *