CVE:CVE-2005-2190
CNNVD:CNNVD-200507-114
Comersus shopping cart是一套Web网站购物车软件。
Comersus shopping cart中存在多个SQL注入漏洞。
远程攻击者可通过comersus_optAffiliateRegistrationExec.asp的email参数或comersus_optReviewReadExec.asp的idProduct参数执，行任意SQL命令。
solution:Upgrade comersus_open_technologies comersus_cart to a higher version than *