CVE:CVE-2002-1886
CNNVD:CNNVD-200212-555
TightAuction 3.0版本在带有不足访问控制的web文档根下储存config.inc，远程攻击者可以借助该漏洞获得数据库用户名和密码。
solution:Upgrade tightauction tightauction to a higher version than 3.0,and avoid the version 3.0