CVE:CVE-2007-4121
CNNVD:CNNVD-200708-010
E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, 以及Auction Script的admin.aspx中存在多个SQL注入漏洞。远程攻击者可以借助(1)EmailAdd (用户名)和(2) Pass (password)参数，执行任意SQL指令。
solution:Upgrade e-commerce_solutions auction_script to a higher version than *; Upgrade e-commerce_solutions multi-vendor_e-shop_script to a higher version than *; Upgrade e-commerce_solutions shopping_cart_script to a higher version than *