CVE:CVE-2008-5590
CNNVD:CNNVD-200812-275
Kalptaru Infotech Product Sale Framework是一个免费的自动处理数字产品销售的脚本。
Kalptaru Infotech Product Sale Framework 0.1 beta的customer.forumtopic.php中存在SQL注入漏洞。远程攻击者可以借助forum_topic_id参数，执行任意SQL指令。
solution:Upgrade kalptaru_infotech product_sale_framework to a higher version than 0.1:beta,and avoid the version 0.1:beta