CVE:CVE-2009-4175
CNNVD:CNNVD-200912-042
Cute News 是PHP文本 文章/新闻系统 CutePHP CuteNews 1.4.6版本和8b之前的UTF-8 CuteNews允许远程攻击者通过对search.php中的from_date_day参数的无效日期值获得敏感信息，该文件在一个错误信息中显示安装路径。
solution:Upgrade cutephp cutenews to a higher version than 1.4.6,and avoid the version 1.4.6; Upgrade korn19 utf-8_cutenews to a higher version than 8,and avoid the version 8