CVE:CVE-2008-6420
CNNVD:CNNVD-200903-130
Social Site Generator(SSG)是一款社交网络系统 (SNS)平台构建工具。
Social Site Generator (SSG) 2.0版本允许远程攻击者可以借助对(1)filedload.php,(2)webadmin/download.php,和(3)webadmin/download_file.php的文件参数，读取任意文件。
solution:Upgrade socialsitegenerator social_site_generator to a higher version than 2.0,and avoid the version 2.0