CVE:CVE-2008-4144
CNNVD:CNNVD-200809-333
ACG-ScriptShop E-Gold Script Shop的index.php中存在SQL注入漏洞。远程攻击者可以通过一个showcat操作中的cid参数来执行任意SQL命令。
solution:Upgrade discountedscripts e-gold_script_shop to a higher version than *