CVE:CVE-2006-0882
CNNVD:CNNVD-200602-372
Noah's Classifieds 1.3的include.php中存在目录遍历漏洞。远程攻击者可以借助指向index.php的otherTemplate参数包含任意本地文件。
solution:Upgrade phpoutsourcing noahs_classifieds to a higher version than 1.2,1.3,and avoid the version 1.2,1.3