https://www.exploit-db.com/exploits/22513

漏洞细节尚未披露

source: http://www.securityfocus.com/bid/7390/info

MPCSoftWeb does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information such as administrative credentials for the guestbook. 

http://www.example.com/mpcsoftweb_guestbook/database/mpcsoftweb_guestdata.mdb