CVE:CVE-2002-1423
CNNVD:CNNVD-200304-086
FUDforum 2.2.0之前版本的tmp_view.php存在漏洞。远程攻击者借助文件参数中绝对路径名读取任意文件。
solution:Upgrade ilia_alshanetsky fudforum to a higher version than 1.2.8,1.9.8,2.0.2,and avoid the version 1.2.8,1.9.8,2.0.2