CVE:CVE-2008-1921
CNNVD:CNNVD-200804-345
第五大街购物车1.2试验版本的store_pages/category_list.php存在SQL注入漏洞。远程攻击者通过category_ID参数来执行任意SQL命令。
solution:Upgrade 5th_avenue_software 5th_avenue_shopping_cart to a higher version than 1.2,and avoid the version 1.2