CVE:CVE-2008-2073
CNNVD:CNNVD-200805-026
Virtual Design Studio vlbook 1.21的include/global.inc.php中存在的目录遍历漏洞,远程攻击者通过l参数的一个.. (参数中包含'..')来包含和执行任意本地文件。
solution:Upgrade virtual_design_studios vlbook to a higher version than 1.21,and avoid the version 1.21