CVE:CVE-2009-2100
CNNVD:CNNVD-200906-288
Joomla! JoomlaPraise Projectfork (com_projectfork)组件2.0.10版本中存在目录遍历漏洞。远程攻击者可以借助对index.php的会话参数中的目录遍历序列，读取任意文件。
solution:Upgrade joomlapraise com_projectfork to a higher version than 2.0.10,and avoid the version 2.0.10