CVE:CVE-2004-2506
CNNVD:CNNVD-200412-879
WIKINDX 0.9.9g之前版本存在未解析web内容传送漏洞。远程攻击者可以借助对config.inc的直接HTTP请求获得敏感信息。
solution:Upgrade wikindx wikindx to a higher version than 0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.9b,0.9.9c,0.9.9d,0.9.9e,0.9.9f,and avoid the version 0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,0.9.8,0.9.9,0.9.9b,0.9.9c,0.9.9d,0.9.9e,0.9.9f