CVE:CVE-2007-4942
CNNVD:CNNVD-200709-219
Focus/SIS中的moduls/Discipline/StudentFieldBreakdown.php存在PHP远程文件包含漏洞， 远程攻击者可以借助FocusPath参数的一个URL执行任意PHP代码。
solution:Upgrade focus-sis focus_sis to a higher version than 1.0,and avoid the version 1.0