CVE:CVE-2007-4872
CNNVD:CNNVD-200709-422
SimpNews 2.41.03中通过(1)admin/index.php的一个无效的长参数；或对(2) admin/dbg_infos.php, (3) admin/heading.php,或(4) evsearch.php的直接请求；该请求显示不同错误信息，远程攻击者可以途径获得敏感信息。
solution:Upgrade simplenews simplenews to a higher version than 2.41.03,and avoid the version 2.41.03