CVE:CVE-2005-2652
CNNVD:CNNVD-200508-243
Zorum 3.5允许远程攻击者借助于对页面(1)gorum/notification.php、(2)user.php、(3)attach.php、(4)blacklist.php、(5)zorum/forum.php、(6)globalstat.php、(7)gorum/trace.php、(8)gorum/badwords.php或(9)gorum/flood.php的直接请求获取完整的安装路径。
solution:Upgrade phpoutsourcing zorum to a higher version than 3.5,and avoid the version 3.5