CVE:CVE-2010-1537
CNNVD:CNNVD-201004-419
phpCDB存在多个目录遍历漏洞，远程攻击者可以通过(1) firstvisit.php, (2) newfolder.php, (3) showfolders.php, (4) newlang.php, (5) showinnerfolder.php, (6) writecode.php, 和 (7) showcode.php的lang_global参数的".."符包含并执行任意文件。
solution:Upgrade francois_bissonnette phpcdb to a higher version than 1.0,and avoid the version (,1.0]