CVE:CVE-2006-1956
CNNVD:CNNVD-200604-411
(1) Mambo 和(2) Joomla!中的com_rss项 (rss.php) 允许远程攻击者借助于无效的feed参数获取敏感信息。该漏洞在错误信息中泄露了路径信息。
solution:Upgrade joomla joomla to a higher version than 1.0.7,and avoid the version 1.0.7; Upgrade mambo mambo to a higher version than 4.5.3h:h,and avoid the version 4.5.3h:h