CVE:CVE-2006-7000
CNNVD:CNNVD-200702-198
Headstart Solutions DeskPRO允许远程攻击者可以借助提交对(1)email/mail.php,(2)includes/init.php,(3)includes/cron/中的某个文件和(4)jpgraph.php,(5)jpgraph_bar.php,(6)jpgraph_pie.php, 以及(7)includes/graph/中的jpgraph_pie3d.php的直接请求，获得完整路径。该漏洞在错误信息中泄漏路径信息。
solution:Upgrade headstart_solutions deskpro to a higher version than 2.0.0,2.0.1,and avoid the version 2.0.0,2.0.1