CVE:CVE-2007-1127
CNNVD:CNNVD-200702-499
shopkitplus的enc/stylecss.php中存在目录遍历漏洞。远程攻击者可以通过changetheme参数中的..，读取任意文件。
solution:Upgrade watersweb_shops shop_kit_plus to a higher version than initial,and avoid the version initial