CVE:CVE-2006-4487
CNNVD:CNNVD-200608-515
DUware DUpoll 3.0和3.1版本对web文档根目录下存储的_private/Dupoll.mdb文件访问控制不足，远程攻击者利用此漏洞可获取敏感信息，例如用户名和密码。
solution:Upgrade duware dupoll to a higher version than 3.0,3.1,and avoid the version 3.0,3.1