CVE:CVE-2008-5936
CNNVD:CNNVD-200901-276
mini-pub 0.3及之前版本中的front-end/edit.php允许远程攻击者借助sFileName参数中的一个文件名，读取文件和获得PHP源代码。
solution:Upgrade mini-pub mini-pub to a higher version than 0.3,0.1,0.1.1,0.1.2,and avoid the version (,0.3],0.1,0.1.1,0.1.2