CVE:CVE-2009-2081
CNNVD:CNNVD-200906-275
phpWebThings 1.5.2版本及其早期版本的help.php中存在目录遍历漏洞,当magic_quotes_gpc被中止时,远程攻击者可以借助module参数中的一个..，读取任意文件。
solution:Upgrade phpwebthings phpwebthings to a higher version than 1.5.2,0.1,0.2,0.2b,0.3,0.4,0.4.1,0.4.2,0.6.0,1.0,1.1a,1.4,1.5.0,1.5.1,and avoid the version (,1.5.2],0.1,0.2,0.2b,0.3,0.4,0.4.1,0.4.2,0.6.0,1.0,1.1a,1.4,1.5.0,1.5.1