CVE:CVE-2007-0349
CNNVD:CNNVD-200701-294
nicecoder.com INDEXU 5.x的upgrade.php中目录遍历漏洞。远程攻击者可以借助网关参数中的..，包含任意的本地文件。
solution:Upgrade nicecoder indexu to a higher version than 5.0,and avoid the version (,5.0]