CVE:CVE-2010-4943
CNNVD:CNNVD-201110-143
Saurus CMS 4.7.0版本中存在多个代码注入漏洞。远程攻击者可借助(1)file.php或者(2)com_del.php中的class_path参数的URL执行任意PHP代码。
solution:Upgrade brothersoft saurus_cms to a higher version than 4.7.0,and avoid the version 4.7.0