CVE:CVE-2007-5113
CNNVD:CNNVD-200709-366
Google Urchin中的report.cgi允许远程攻击者可以借助特定修改query参数绕过权限并获得敏感信息(web服务器日志),如利用profile, rid, prefs, n, vid, bd, ed, dt, 和gtype参数。
solution:Upgrade roi_revolution urchin to a higher version than 5.7.03,and avoid the version (,5.7.03]