https://www.exploit-db.com/exploits/22009
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200212-692

EZhttpbench是一款简单的由PHP编写的评测程序，它可以获取WEB页并对时间进行评测，衡量统计。ezhttpbench.php脚本对用户提交的输入缺少充分检查，远程攻击者可以利用这个漏洞可以以WEB权限查看系统任意文件内容。ezhttpbench.php脚本的AnalyseSite参数的内容检查不充分，攻击者可以提交任意系统文件作为此参数内容，而导致文件内容泄露给攻击者，利用这些敏感信息可以对系统进一步进行攻击。

source: http://www.securityfocus.com/bid/6153/info

An information disclosure vulnerability has been reported for httpbench. Reportedly, httpbench may disclose the contents of web server readable files to remote attackers.

Information obtained in this manner may be used to launch further, destructive attacks against a vulnerable system. 

http://www.web_sitesi/ezhttpbench.php?AnalyseSite=/etc/passwd&NumLoops=1

来源:BID
名称:6153
链接:http://www.securityfocus.com/bid/6153
来源:XF
名称:ez-httpbench-view-files(10589)
链接:http://www.iss.net/security_center/static/10589.php
来源:BUGTRAQ
名称:20021110benchmarktoolforHTTPpages.
链接:http://online.securityfocus.com/archive/1/299235
来源：NSFOCUS
名称：3818
链接：http://www.nsfocus.net/vulndb/3818