CVE:CVE-2007-5220
CNNVD:CNNVD-200710-078
ASP Product Catalog中的catalog.asp存在SQL注入漏洞，远程攻击者可以借助cid参数和可能的其它参数执行任意SQL指令。
solution:Upgrade asp_product_catalog asp_product_catalog to a higher version than 1.0,and avoid the version 1.0