CVE:CVE-2008-2791
CNNVD:CNNVD-200806-293
Kalptaru Infotech Comparison Engine Power Script 1.0的product.detail.php中存在SQL注入漏洞，远程攻击者通过id参数来执行任意SQL命令。
solution:Upgrade kalptaru_infotech comparison_engine_power_script to a higher version than 1.0,and avoid the version 1.0