CVE:CVE-2005-4003
CNNVD:CNNVD-200512-058
Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d及之前版本，以及Lite 2.1及之前版本存在多个SQL注入漏洞。远程攻击者可以借助(1)对adv_search.asp 的 srch_product_name参数和 (2) b对bsearch.asp的 b_search 参数，执行任意SQL指令。
solution:Upgrade asps shopping_cart to a higher version than 2.1,2.9d,and avoid the version 2.1,2.9d