CVE:CVE-2005-1329
CNNVD:CNNVD-200505-514
OneWorldStore中的owOfflineCC.asp使得远程攻击者可以通过修改idOrder参数来获取敏感信息。
solution:Upgrade oneworldstore oneworldstore to a higher version than basic,business,enterprise,free,soho,and avoid the version basic,business,enterprise,free,soho