CVE:CVE-2004-2146
CNNVD:CNNVD-200412-598
PD9 Software MegaBBS 2和2.1版本存在CRLF注入漏洞。攻击者可以借助thread-post.asp的writenew行为的fid参数执行HTTP响应拆分攻击。
solution:Upgrade pd9_software megabbs to a higher version than 2,2.1,and avoid the version 2,2.1