CVE:CVE-2008-2774
CNNVD:CNNVD-200806-274
CartKeeper CKGold Shopping Cart 2.5 和 2.7的item.php中存在SQL注入漏洞，远程攻击者通过category_id参数来执行任意SQL命令。
solution:Upgrade cartkeeper ckgold_shopping_cart to a higher version than 2.5,2.7,and avoid the version 2.5,2.7