CVE:CVE-2005-3209
CNNVD:CNNVD-200510-101
Aenovo是一款小巧的内容管理系统。
Aenovo产品(1)aeNovo，(2)aeNovoShop和(3)aeNovoWYSI将明文的密码信息储存在(a)control、(b)content和(c)page表中，拥有数据库访问权的攻击者可以获取这些密码并获得特权。
solution:Upgrade aenovo aenovo to a higher version than *; Upgrade aenovo aenovoshop to a higher version than *; Upgrade aenovo aenovowysi to a higher version than *