CVE:CVE-2004-2653
CNNVD:CNNVD-200412-540
PD9 Software MegaBBS 2.0和2.1版本存在未明的漏洞。远程攻击者借助包括(1)admin/userlevelmembers-edit.asp 和(2)admin/edit-groups.asp的未知向量提升特权。
solution:Upgrade pd9_software megabbs to a higher version than 2.0,2.1,and avoid the version 2.0,2.1