CVE:CVE-2007-2106
CNNVD:CNNVD-200704-334
Kai Content Management System (K-CMS)的index.php中存在目录遍历漏洞。远程攻击者可以借助current_theme参数中的..，包含和运行任意的本地文件。
solution:Upgrade kai_content_management_system kai_content_management_system to a higher version than 1.0,and avoid the version 1.0