CVE:CVE-2004-2172
CNNVD:CNNVD-200412-817
EarlyImpact ProductCart使用一个弱加密计划加密密码，远程攻击者可以借助一个已选纯文本攻击获取密码。
solution:Upgrade early_impact productcart to a higher version than 1.5,1.6_b,1.6_b001,1.6_b002,1.6_b003,1.6_br,1.6_br001,1.6_br003,1.5002,1.5003,1.5003r,1.5004,1.6002,1.6003,2.0,2.0_br000,2.5,and avoid the version 1.5,1.6_b,1.6_b001,1.6_b002,1.6_b003,1.6_br,1.6_br001,1.6_br003,1.5002,1.5003,1.5003r,1.5004,1.6002,1.6003,2.0,2.0_br000,2.5