CVE:CVE-2005-4331
CNNVD:CNNVD-200512-365
iHTML Merchant Version 2 Pro的merchant.ihtml中存在SQL注入漏洞，远程攻击者可以通过(1) step、(2) id和(3) pid参数执行任意SQL命令。
solution:Upgrade ihtml_merchant ihtml_merchant to a higher version than 2_pro,and avoid the version 2_pro