CVE:CVE-2006-4971
CNNVD:CNNVD-200609-420
MyBB(也称为MyBulletinBoard)远程攻击者通过直接请求inc/plugins/hello.php从而在错误消息中揭示路径来获取敏感信息。
solution:Upgrade mybulletinboard mybulletinboard to a higher version than 1.0.1,1.0.2,1.0.3,1.0.4,1.0_final,1.0_preview_release_2,1.0_rc2,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.7,1.10,1.14,1.20,and avoid the version 1.0.1,1.0.2,1.0.3,1.0.4,1.0_final,1.0_preview_release_2,1.0_rc2,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.7,1.10,1.14,1.20