CVE:CVE-2006-6034
CNNVD:CNNVD-200611-370
SitesOutlet E-commerce Kit-1 PayPal Edition存在多个SQL注入漏洞，远程攻击者可以通过在(a)catalogue.asp内的(1)keyword 或(2)cid参数，或者在(b)viewDetail.asp内的(3)pid参数，来执行任意SQL命令。
solution:Upgrade sitesoutlet e-commerce_kit-1 to a higher version than paypal_edition,and avoid the version paypal_edition