CVE:CVE-2007-0606
CNNVD:CNNVD-200703-517
w-agora 4.2.1版本允许远程攻击者借助提交到index.php的(1)bn[]数组参数和到delete_forum.php的(2)特定参数，获得敏感信息。
solution:Upgrade w-agora w-agora to a higher version than 4.2.1,and avoid the version 4.2.1