CVE:CVE-2005-1137
CNNVD:CNNVD-200505-795
Simple PHP Blog (sphpBlog) 0.4.0使得远程攻击者可以通过直接请求sb_functions.php，致使系统在一个PHP出错信息中泄漏完整路径，从而获取敏感信息。
solution:Upgrade alexander_palmo simple_php_blog to a higher version than 0.4.0,and avoid the version 0.4.0