CVE:CVE-2008-0719
CNNVD:CNNVD-200802-157
osCommerce Online Merchant的Customer Testimonials Addon 的customer_testimonials.php中存在的SQL注入漏洞会允许远程攻击者通过testimonial_id 参数来执行任意SQL命令。
solution:Upgrade oscommerce customer_testimonials to a higher version than 3.1,and avoid the version 3.1; Upgrade oscommerce oscommerce to a higher version than 2.2,and avoid the version 2.2