CVE:CVE-2007-0133
CNNVD:CNNVD-200701-087
iGeneric iG Shop 1.4及之前版本的display_review.php中存在多个SQL注入漏洞。远程攻击者可以借助(1)id或(2)user_login_cookie参数，执行任意的SQL指令
solution:Upgrade igeneric ig_shop to a higher version than 1.4,and avoid the version (,1.4]