CVE:CVE-2010-5040
CNNVD:CNNVD-201111-106
Nucleus的NP_Gallery插件0.94版本的nucleus/plugins/NP_gallery.php中存在PHP远程文件包含漏洞。远程攻击者可借助DIR_NUCLEUS参数中的URL执行任意PHP代码。
solution:Upgrade john_bradshaw np_gallery_plugin to a higher version than 0.94,and avoid the version 0.94