CVE:CVE-2007-1128
CNNVD:CNNVD-200702-514
shopkitplus允许远程攻击者通过查询(1)带有curmonth[]=01查询字符串的events.php和(2)带有changetheme[]=查询字符串的enc/stylecss.php请求，在不同的错误信息中显示路径，获得敏感信息。
solution:Upgrade watersweb_shops shop_kit_plus to a higher version than initial,and avoid the version initial
solution:Upgrade takebishi_corporation devicexplorer_opc_server to a higher version than 3.12_build2,3.12_build1,and avoid the version (,3.12_build2],3.12_build1