CVE:CVE-2006-2519
CNNVD:CNNVD-200605-417
phpwcms 1.2.5-DEV中的include/inc_ext/spaw/spaw_control.class.php存在目录遍历漏洞。远程攻击者可以借助spaw_root 参数（该参数中包含..）序列，包含任意文件。
solution:Upgrade phpwcms phpwcms to a higher version than 1.2.5_dev,and avoid the version 1.2.5_dev