CVE:CVE-2007-5128
CNNVD:CNNVD-200709-427
Windows中的SimpNews 2.41.03,当PHP 5.0.0之前的版本被使用时,远程攻击者可以借助events.php的一个特定的link_date参数获得敏感信息,该参数显示Windows中mktime函数的不支持参数类型引致的错误信息的路径。
solution:Upgrade boesch-it simpnews to a higher version than 2.41.03,and avoid the version 2.41.03; Upgrade php php to a higher version than 5.0.0,and avoid the version (,5.0.0]