CVE:CVE-2005-4320
CNNVD:CNNVD-200512-360
远程攻击者可以借助Limbo CMS 1.0.4.2及更早版本，通过对(1) doc.inc.php、(2) element.inc.php和(3) node.inc.php的直接请求造成在错误信息中泄露路径，从而获得应用程序的安装路径。
solution:Upgrade limbo_cms limbo_cms to a higher version than 1.0.4.2,and avoid the version (,1.0.4.2]