CVE:CVE-2006-6945
CNNVD:CNNVD-200701-339
Virtuemart 1.0.7版本中存在SQL注入漏洞。远程攻击者可以借助未明向量，执行任意的SQL指令。这些漏洞可能与在virtuemart_parser.php中被处理的(1)Itemid,(2)product_id和category_id参数有关。
solution:Upgrade virtuemart virtuemart to a higher version than 1.0.7,and avoid the version 1.0.7