CVE:CVE-2008-5619
CNNVD:CNNVD-200812-313
Chuggnutt HTML to Text Converter 是一款html与text的转换工具。
Chuggnutt HTML至Text Converter的html2text.php,当在RoundCube Webmail (roundcubemail) 0.2-1.alpha 和0.2-3.beta, Mahara,一级AtMail Open 1.03版本中运行时,允许远程攻击者借助特制的由具有eval开关的preg_replace函数处理的输入，执行任意代码。
solution:Upgrade roundcube webmail to a higher version than 0.2.1:alpha,0.2.3:beta,and avoid the version 0.2.1:alpha,0.2.3:beta