CVE:CVE-2006-1764
CNNVD:CNNVD-200604-184
Hosting Controller 6.1以不足的访问控制权限将forum/db/forum.mdb存储在web文件根目录下。这使得远程攻击者可以获取敏感信息，如用户名和密码凭证。
solution:Upgrade hosting_controller hosting_controller to a higher version than 6.1_hotfix_2.9,1.1,1.3,1.4,1.4.1,1.4b,6.1,6.1_hotfix_1.4,6.1_hotfix_1.7,6.1_hotfix_1.9,6.1_hotfix_2.0,6.1_hotfix_2.1,6.1_hotfix_2.3,6.1_hotfix_2.8,2002,2002_rc_1,and avoid the version (,6.1_hotfix_2.9],1.1,1.3,1.4,1.4.1,1.4b,6.1,6.1_hotfix_1.4,6.1_hotfix_1.7,6.1_hotfix_1.9,6.1_hotfix_2.0,6.1_hotfix_2.1,6.1_hotfix_2.3,6.1_hotfix_2.8,2002,2002_rc_1