CVE:CVE-2007-4736
CNNVD:CNNVD-200709-058
CartKeeper CKGold Shopping Cart 2.0版本的category.php中存在SQL注入漏洞,远程攻击者可以借助category_id参数执行任意SQL指令。
solution:Upgrade cartkeeper ckgold_shopping_cart to a higher version than 2.0,and avoid the version 2.0