CVE:CVE-2008-7254
CNNVD:CNNVD-201004-108
Irmin CMS (以前称为 Pepsi CMS)的脚本includes/template-loader.php存在目录遍历漏洞。远程攻击者可以借助_Root_Path参数中包含的“..”，包含和执行任意的文件。
solution:Upgrade ermenegildo_fiorito irmin_cms to a higher version than 0.5,0.6:beta2,and avoid the version 0.5,0.6:beta2