CVE:CVE-2007-3247
CNNVD:CNNVD-200706-272
VirtueMart中存在SQL注入漏洞。远程攻击者可以借助可能与PATH_INFO (PHP_SELF)的不正确的输入校验有关的未明参数，执行任意的SQL指令。
solution:Upgrade virtuemart virtuemart to a higher version than 1.0.9,and avoid the version (,1.0.9]