CVE:CVE-2006-2978
CNNVD:CNNVD-200606-239
Mafia Moblog 0.6M1及更早版本远程攻击者通过直接请求(1)big.php和(2)upgrade.php在出错信息中获取安装路径。
solution:Upgrade mafia_moblog mafia_moblog to a higher version than 0.6m1,and avoid the version (,0.6m1]