CVE:CVE-2007-3323
CNNVD:CNNVD-200706-354
Comersus Shop Cart的comersus_optReviewReadExec.asp中存在SQL注入漏洞。远程攻击者可以借助idProduct参数，执行任意的SQL指令。
solution:Upgrade comersus_open_technologies comersus_cart to a higher version than 7.07,and avoid the version 7.07