CVE:CVE-2012-4257
CNNVD:CNNVD-201208-163
Yaqas (Yet Another Question & nswer System) 1.0 Alpha 1中存在漏洞。远程攻击者可利用该漏洞借助在PHPSESSID中的无效字符获取敏感信息，进而揭示错误消息的安装路径。
solution:Upgrade george_karpouzas yet_another_question_&_answer_system to a higher version than 1.0:alpha1,and avoid the version 1.0:alpha1