CVE:CVE-2009-2546
CNNVD:CNNVD-200907-297
Advanced Electron Forum (AEF) 1.x存在目录遍历漏洞，远程攻击者可以通过修改文件时的参数avatargalfile判断文件是否存在。
solution:Upgrade anelectron advanced_electron_forum to a higher version than 1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,and avoid the version 1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8