CVE:CVE-2008-5580
CNNVD:CNNVD-200812-265
mini-pub是一款轻量级的出版系统。
mini-pub 0.3版本的mini-pub.php/front-end/cat.phpallows。远程攻击者可以借助sFileName自变量中的外壳元字符，执行任意指令。
solution:Upgrade mini-pub mini-pub to a higher version than 0.3,and avoid the version 0.3