CVE:CVE-2009-4766
CNNVD:CNNVD-201004-178
YP Portal MS-Pro Surumu (aka MS-Pro Portal Scripti) 1.0和1.2在网页根目录下存储敏感信息，但访问控制不严格，远程攻击者可以通过galeri/database/db.mdb直接访问下载数据库。
solution:Upgrade yasirpro ms-pro_portal_scripti to a higher version than 1.0,1.2,and avoid the version 1.0,1.2