CVE:CVE-2007-5318
CNNVD:CNNVD-200710-154
TYPOlight webCMS中的preview.php存在未明漏洞，远程攻击者可以借助src参数下载任意文件。
solution:Upgrade typolight typolight_webcms to a higher version than 2.4.6,and avoid the version 2.4.6