CVE:CVE-2006-4544
CNNVD:CNNVD-200609-032
ExBB 1.9.1中的多个PHP远程文件包含漏洞，在启用register_globals时，远程攻击者可以通过以下模块目录下文件中的exbb[home_path]参数内的URL执行任意PHP代码：(1) birstday/birst.php (2) birstday/select.php, (3) birstday/profile_show.php, (4) newusergreatings/pm_newreg.php, (5) punish/p_error.php, (6) punish/profile.php和(7) threadstop/threadstop.php。
solution:Upgrade exbb exbb to a higher version than 1.9.1,and avoid the version 1.9.1