CVE:CVE-2007-2507
CNNVD:CNNVD-200705-090
Treble Designs 的includes/download.php文件中存在目录遍历漏洞。远程攻击者可以借助item参数中的..，读取任意文件。
solution:Upgrade treble_designs 1024_cms to a higher version than 0.7,and avoid the version 0.7