CVE:CVE-2010-1857
CNNVD:CNNVD-201005-116
RepairShop2 Trial的index.php存在SQL注入漏洞，当magic_quotes_gpc被禁用时，远程攻击者可以通过products.details操作的prod参数执行任意SQL命令。
solution:Upgrade realitymedias repairshop2 to a higher version than 1.9.023,and avoid the version 1.9.023