CVE:CVE-2006-5832
CNNVD:CNNVD-200611-176
All In One Control Panel (AIOCP)存在输入验证漏洞。远程攻击者可以通过某些对(1) public/code/cp_dpage.php(可能涉及aiocp_dp[]参数)，(2)public/code/cp_show_ec_products.php(可能涉及order_field[]参数)，和(3)public/code/cp_show_page_help.php(可能涉及hp[]参数)的请求，导致系统在各种错误消息中泄漏路径，从而获取web服务器的完整路径。
solution:Upgrade aiocp aiocp to a higher version than 1.3.000,1.3.001,1.3.002,1.3.003,1.3.004,1.3.005,1.3.006,1.3.007,and avoid the version 1.3.000,1.3.001,1.3.002,1.3.003,1.3.004,1.3.005,1.3.006,1.3.007