CVE:CVE-2007-5172
CNNVD:CNNVD-200710-018
Quicksilver Forums版本之前的版本1.4.1远程攻击者可以借助引发未明连接错误,即在结果错误信息中显示数据库密码获得敏感信息。
solution:Upgrade quicksilver_forums quicksilver_forums to a higher version than 1.4.0,and avoid the version (,1.4.0]