CVE:CVE-2006-2405
CNNVD:CNNVD-200605-303
Unclassified NewsBoard (UNB) 1.6.1 patch 1 及的早期版本的unb_lib/abbc.conf.php 存在目录遍历漏洞。启用register_globals时，可以使远程攻击者借助对unb_lib/abbc.css.php的ABBC[Config][smileset] 参数（该参数中包含..）序列和尾随的零字节(%00) ，包含任意文件。
solution:Upgrade unclassified_newsboard unclassified_newsboard to a higher version than 1.6.1_patch1,1.5.3,1.5.3_patch3,1.5.3a,1.6.1,and avoid the version (,1.6.1_patch1],1.5.3,1.5.3_patch3,1.5.3a,1.6.1