CVE:CVE-2006-4297
CNNVD:CNNVD-200608-352
osCommerce 2.2 Milestone 2 060817之前版本中的shopping_cart.php脚本存在SQL注入漏洞，远程攻击者可借助id array参数执行任意SQL指令。
solution:Upgrade oscommerce oscommerce to a higher version than 2.2_ms2_2006-08-17,and avoid the version 2.2_ms2_2006-08-17