CVE:CVE-2006-5945
CNNVD:CNNVD-200611-283
MGinternet Car Site Manager (CSM)存在多个SQL注入漏洞，远程攻击者可以通过传给(a) csm/asp/detail.asp的(1)p参数，或者传给(b)csm/asp/listings.asp的(2)l，(3)typ或(4)loc参数来执行任意SQL命令。
solution:Upgrade mginternet car_site_manager to a higher version than *