CVE:CVE-2007-6399
CNNVD:CNNVD-200712-182
Flat PHP Board中的index.php允许远程验证用户通过读取侧写操作产生的网页中的HTML源的密码参数来获得经常用户帐号的密码。
solution:Upgrade myupb flat_php_board to a higher version than 1.2,and avoid the version (,1.2]