CNCVE编号：CNCVE-20010031 CVE编号：CAN-2001-0031 安全级别：中 漏洞中文描述： BroadVision One-To-One Enterprise允许远程攻击者通过请求一个不存在的.JSP文件名来确定服务器文件的物理路径。 漏洞英文描述： BroadVision One-To-One Enterprise allows remote attackers to determine the physical path of server files by requesting a .JSP file name that does not exist. 漏洞参考： XF:broadvision-bv1to1-reveal-path BUGTRAQ:20001207 BroadVision One-To-One Enterprise Path Disclosure Vulnerability 系统类型：其他 漏洞类型：异常处理错误