CVE:CVE-2007-1906
CNNVD:CNNVD-200704-155
eCardMAX HotEditor (Hot Editor)和MyBB HotEditor插件的richedit/keyboard.php中存在目录遍历漏洞。远程攻击者可以借助first参数中的..，包含和运行任意的本地文件。
solution:Upgrade ecardmax.com hot_editor to a higher version than 4.0,and avoid the version 4.0; Upgrade mybb mybb_hot_editor_plugin to a higher version than *