CVE:CVE-2008-0648
CNNVD:CNNVD-200802-115
OpenSiteAdmin 0.9.1.1以及之前版本中的多个PHP远程文件包含漏洞允许远程攻击者借助一个URL执行任意的PHP代码。该路径参数是以下脚本中的以下path参数(1)indexFooter.php,(2)DatabaseManager.php,(3)FieldManager.php,(4)Filter.php,(5)Form.php,(6)FormManager.php,(7)LoginManager.php,和(8)到 scripts/classes/中的Filters/SingleFilter.php。
solution:Upgrade opensiteadmin opensiteadmin to a higher version than 0.9.1.1,and avoid the version (,0.9.1.1]