CVE:CVE-2008-5962
CNNVD:CNNVD-200901-319
Gravity Getting Things Done(GTD)0.4.5及之前版本中的library/setup/rpc.php存在目录遍历漏洞。远程攻击者可以借助objectname参数中的".."，包含和运行任意的本地文件。
solution:Upgrade gravity-gtd gravity-gtd to a higher version than 0.4.5,0.2:beta,0.3,0.4,and avoid the version (,0.4.5],0.2:beta,0.3,0.4