CVE:CVE-2006-2946
CNNVD:CNNVD-200606-230
Dmx Forum 2.1a在web根目录下存储_includes/bd.inc且无充分访问控制，远程攻击者可获取用户名和密码信息。
solution:Upgrade dmx_forum dmx_forum to a higher version than 2.1a,and avoid the version (,2.1a]