CVE:CVE-2008-0464
CNNVD:CNNVD-200801-402
absofort aconon Mail 2007 Enterprise SQL 11.7.0和 Mail 2004 Enterprise SQL 11.5.1的archiv.cgi中存在目录遍历漏洞。远程攻击者可以通过template参数的一个.. (dot dot)，读取任意文件。
solution:Upgrade absofort aconon_mail_enterprise_sql to a higher version than 11.5.1:2004,11.7.0:2007,and avoid the version 11.5.1:2004,11.7.0:2007
solution:Upgrade chronoengine chronoforms to a higher version than 2.3.5,and avoid the version 2.3.5