CVE:CVE-2008-0498
CNNVD:CNNVD-200801-446
Bigware Shop 2.0中的main_bigware_53.tpl.php中的SQL注入漏洞允许远程攻击者借助main_bigware_53.php的results操作中的pollid参数执行任意的SQL命令。
solution:Upgrade bigware bigware_shop to a higher version than 2.0,and avoid the version 2.0