CVE:CVE-2007-1901
CNNVD:CNNVD-200705-263
SonicBB 允许远程攻击者可以借助提交到search.php的(1)by[]参数、到viewforum.php的(2)p[]参数以及到(a)viewforum.php或(b)members.php的(3)id参数，获得敏感信息。它会在错误信息中显示安装路径。
solution:Upgrade sonicbb sonicbb to a higher version than 1.0,and avoid the version 1.0