CVE:CVE-2004-1968
CNNVD:CNNVD-200404-094
Open Bulletin Board (OpenBB) 1.0.6及其早期版本文件myhome.php中的readmsg活动存在漏洞。远程攻击者可以通过转换id参数读取任意信息。
solution:Upgrade openbb openbb to a higher version than 1.0_.0_beta1,1.0_.0_rc1,1.0_.0_rc2,1.0_.0_rc3,1.0_.5,1.0_.6,and avoid the version 1.0_.0_beta1,1.0_.0_rc1,1.0_.0_rc2,1.0_.0_rc3,1.0_.5,1.0_.6