CVE:CVE-2008-6875
CNNVD:CNNVD-200907-353
ASP Product Catalog 的default.asp 中存在SQL注入漏洞。远程攻击者可以借助cid 参数执行任意的SQL命令。
solution:Upgrade humayun_shabbir_bhutta asp_product_catalog to a higher version than 1.0,and avoid the version 1.0