CVE:CVE-2006-5261
CNNVD:CNNVD-200610-186
PHPMyNews中存在多个PHP远程文件包含漏洞，远程攻击者可以通过include/目录下(1)disp_form.php3，(2)disp_smileys.php3，(3)little_news.php3和(4)index.php3中的cfg_include_dir参数包含的URL来执行任意PHP代码。
solution:Upgrade phpmynews phpmynews to a higher version than 1.4,and avoid the version (,1.4]