CVE:CVE-2010-4845
CNNVD:CNNVD-201109-549
MH Products Projekt Shop中存在多个SQL注入漏洞。远程攻击者可以借助(1)details.php中的ts参数和(2)index.php中的ilceler参数执行任意SQL命令。
solution:Upgrade mhproducts projekt_shop to a higher version than *