CVE:CVE-2006-5197
CNNVD:CNNVD-200610-089
PDshopPro将敏感信息存储在Web根目录下，但没有充分的访问控制。远程攻击者通过直接请求(1) /pdshoppro.mdb、(2) /data/pdshoppro.mdb或(3) /shoppro/data/pdshoppro.mdb下载数据库。
solution:Upgrade pdshoppro pdshoppro to a higher version than *