CVE:CVE-2006-3557
CNNVD:CNNVD-200607-194
MT Orumcek Toplist 2.2将DB/orumcektoplist.mdb储存在没有充分访问控制的web根目录下，可以使远程攻击者通过直接请求来获得敏感信息。
solution:Upgrade mt_orumcek mt_orumcek_toplist to a higher version than 2.2,and avoid the version 2.2