CVE:CVE-2003-1089
CNNVD:CNNVD-200312-395
Zorum 3.4版本的index.php存在漏洞。远程攻击者可以借助无效参数名判断web根目录的全路径，该漏洞在PHP出错的消息中泄漏路径。
solution:Upgrade phpoutsourcing zorum to a higher version than 3.4,and avoid the version 3.4