CVE:CVE-2007-1525
CNNVD:CNNVD-200703-461
Dayfox Blog(dfblog)4版本的postpost.php中存在直接静态代码注入漏洞。当可以借助对posts.php的请求运行cat参数时，远程攻击者可以借助它，执行任意的PHP代码。
solution:Upgrade dayfox_designs dayfox_blog to a higher version than 4,and avoid the version 4