CVE:CVE-2010-2358
CNNVD:CNNVD-201006-355
Nakid CMS 0.5.2的modules/catalog/upload_photo.php存在PHP远程文件包含漏洞。当magic_quotes_gpc被禁止时，远程攻击者可以借助core[system_path]参数执行任意的PHP代码。
solution:Upgrade jeffkilroy nakid_cms to a higher version than 0.5.2,and avoid the version 0.5.2