CVE:CVE-2008-4746
CNNVD:CNNVD-200810-456
Uniwin eCart Professional中存在多个SQL注入漏洞，允许远程攻击者借助search.asp和cartUtil.asp的未明向量执行任意的SQL指令。
solution:Upgrade uniwin ecart_professional to a higher version than 2.0.17,and avoid the version 2.0.17