CVE:CVE-2008-6227
CNNVD:CNNVD-200902-459
Pre Multi-Vendor Shopping Malls是一个在线多厂商电子商务在线解决方案。
Pre Multi-Vendor Shopping Malls的buyer_detail.php中存在SQL注入漏洞。远程攻击者可以借助(1)sid和(2)cid参数，执行任意SQL指令。
solution:Upgrade preproject pre_multi-vendor_shopping_malls to a higher version than -