CVE:CVE-2006-6139
CNNVD:CNNVD-200611-434
Sisfo Kampus 2006 (Semarang 3)中的downloadexcel.php存在目录遍历漏洞，远程攻击者可以通过fn参数来读取任意文件。
solution:Upgrade sisfo_kampus sisfo_kampus to a higher version than 2006,and avoid the version 2006