CVE:CVE-2009-2115
CNNVD:CNNVD-200906-303
SkyBlueCanvas 1.1 r237版本的admin.php允许远程认证管理员获得敏感信息可以借助一个有效的id参数,这会在一条错误的信息中泄漏安装路径。
solution:Upgrade skybluecanvas skybluecanvas to a higher version than 1.1,and avoid the version 1.1