CVE:CVE-2010-0678
CNNVD:CNNVD-201002-227
Katalog Stron Hurricane的脚本includes/moderation.php存在PHP远程文件包含漏洞。当register_globals启用时，远程攻击者可以借助includes_directory参数一个URL，执行任意的PHP代码。
solution:Upgrade katalog.hurricane katalog_stron_hurricane to a higher version than 1.3.5,and avoid the version 1.3.5