CVE:CVE-2006-6999
CNNVD:CNNVD-200702-192
Headstart Solutions DeskPRO的attachment.php允许远程攻击者通过提供一个修改过的id参数的文件号码，读取所有上传好的文件。
solution:Upgrade headstart_solutions deskpro to a higher version than 2.0.0,2.0.1,and avoid the version 2.0.0,2.0.1