CVE:CVE-2010-4849
CNNVD:CNNVD-201109-553
Alibaba Clone B2B 3.4版本中的countrydetails.php存在SQL注入漏洞。远程攻击者可借助es_id参数执行任意SQL命令。
solution:Upgrade alibabaclone alibaba_clone_b2b to a higher version than 3.4,and avoid the version 3.4