CVE:CVE-2005-2565
CNNVD:CNNVD-200508-153
Gravity Board X (GBX)1.1允许远程攻击者借助于(1)提交到deletethread.php中的perm参数中的a 1，或对(2)ban.php、(3)addnews.php、(4)banned.php、(5) boardstats.php、(6)adminform.php、(7)/forms/admininfo.php、(8)/forms/announcements.php、(9)forms/banform.php或/forms目录中的(10)其它页面的直接请求，获取敏感信息。这使得在错误信息中泄露了敏感信息。
solution:Upgrade gravity_board_x_development_team gravity_board_x to a higher version than 1.1,and avoid the version 1.1