CVE:CVE-2009-3309
CNNVD:CNNVD-200909-418
CF ShopKart 5.4测试第二版本中的index.cfm存在SQL注入漏洞。远程攻击者可以借助ViewDetails操作中的itemid参数，执行任意的SQL指令。
solution:Upgrade cfshopkart cf_shopkart to a higher version than 5.4:beta,and avoid the version 5.4:beta