CVE:CVE-2007-2684
CNNVD:CNNVD-200705-396
Jetbox CMS 允许远程攻击者借助一个对(a)main_page.php,(b)open_tree.php和(c)outputs.php的直接请求、对index.php的畸形的查看参数或对admin/cms/opentree.php的(3)id[]参数，获得敏感信息。这会在错误信息中显示安装路径。
solution:Upgrade jetbox jetbox_cms to a higher version than 2.1,and avoid the version 2.1