CVE:CVE-2010-1736
CNNVD:CNNVD-201005-074
KrM Haber在web根目录下保存敏感信息，但缺乏足够的访问控制，远程攻击者可通过d_atabase/Krmdb.mdb直接请求，下载数据库。
solution:Upgrade aspindir krm_haber to a higher version than 1.0,and avoid the version 1.0