CNCVE编号：CNCVE-20001132 CVE编号：CVE-2000-1132 安全级别：中 漏洞中文描述： DCForum cgforum.cgi CGI脚本允许远程攻击者通过一个变形的“forum”变量来阅读任意文件和删除程序本身。 漏洞英文描述： DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a malformed "forum" variable. 漏洞参考： BUGTRAQ:20001114 Cgisecurity.com advisory on dcforum | URL:http://archives.neohapsis.com/archives/bugtraq/2000-11/0218.html | BID:1951 | URL:http://www.securityfocus.com/bid/1951 | CONFIRM:http://www.dcscripts.com/dcforum/dcfNews/124.html# 系统类型： Win2000/NT 漏洞类型：输入有效性检查错误