CVE:CVE-2007-0389
CNNVD:CNNVD-200701-327
ArsDigita Community System (ACS) 3.4.10及之前版本和ArsDigita Community Education Solution (ACES) 1.1中存在目录遍历漏洞。远程攻击者可以借助URI中的.%252e/，读取任意文件。
solution:Upgrade arsdigita arsdigita_community_education_solution to a higher version than 1.1,and avoid the version 1.1; Upgrade arsdigita arsdigita_community_system to a higher version than 3.4.10,and avoid the version (,3.4.10]