CVE:CVE-2014-1637
CNNVD:CNNVD-201401-425
Command School Student Management System是一套基于Web的学生/学校管理系统。
Command School Student Management System 1.06.01中存在信息泄露漏洞，该漏洞源于程序没有正确的限制对sw/backup/backup_ray2.php脚本文件的访问。远程攻击者可通过发送直接请求利用该漏洞下载数据库备份文件。
solution:Upgrade doug_poulin command_school_student_management_system to a higher version than 1.06.01,and avoid the version 1.06.01