CVE:CVE-2006-2329
CNNVD:CNNVD-200605-210
AngelineCMS 0.6.5 可以使远程攻击者借助可在各种出错信息中显示路径的(1) adodb-access.inc.php, (2) adodb-ado.inc.php, (3) adodb-ado_access.inc, (4) adodb-ado_mssql.inc.php, (5) adodb-borland_ibase, (6) adodb-csv.inc.php, (7) adodb-db2.inc.php, (8) adodb-fbsql.inc.php, (9) adodb-firebird.inc.php, (10) adodb-ibase.inc.php, (11) adodb-informix.inc.php, (12) adodb-informix72.inc, (13) adodb-mssql.inc.php, (14) adodb-mssqlpo.inc.php, (15) adodb-mysql.inc.php, (16) adodb-mysqlt.inc.php, (17) adodb-oci8.inc.php, (18) adodb-oci805.inc.php, (19) adodb-oci8po.inc.php和(20) adodb-odbc.inc.php的直接请求；以及借助可提供目录列表和"架构查看"的(21) lib/system/ directory和(22)可能的其他lib/directories的直接请求，获得敏感信息。
solution:Upgrade angelinecms angelinecms to a higher version than 0.6.5,and avoid the version 0.6.5