CVE:CVE-2006-2947
CNNVD:CNNVD-200606-238
Dmx Forum 2.1a允许远程攻击者通过直接请求带有修改过的membre参数的pops/edit.php来获取用户名和密码信息。
solution:Upgrade dmx_forum dmx_forum to a higher version than 2.1a,and avoid the version 2.1a