CVE:CVE-2009-2602
CNNVD:CNNVD-200907-374
R2 Newsletter Lite， Pro， and Stats在web root下储存敏感信息而不赋予足够的访问控制，这使得远程攻击者可以借助一个对admin.mdb的直接请求下载数据库文件。
solution:Upgrade r2newsletter r2_newsletter_lite to a higher version than *; Upgrade r2newsletter r2_newsletter_pro to a higher version than *; Upgrade r2newsletter r2_newsletter_stats to a higher version than *