CVE:CVE-2006-7130
CNNVD:CNNVD-200703-196
Jinzora 2.1及之前版本的backend/primitives/cache/media.php中存在PHP远程文件包含漏洞。远程攻击者可以借助include_path参数中的一个URL，执行任意的PHP代码。此漏洞不同于CVE-2006-6770。
solution:Upgrade jinzora jinzora to a higher version than 2.1,0.1.1,0.2,0.3,0.3:pre,0.3:pre_2,0.3.1,0.4,0.5,0.6.2,0.7,0.8.1,0.8.2,0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,1.0.1,1.1,2.0,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1,and avoid the version (,2.1],0.1.1,0.2,0.3,0.3:pre,0.3:pre_2,0.3.1,0.4,0.5,0.6.2,0.7,0.8.1,0.8.2,0.9,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,1.0.1,1.1,2.0,2.0:beta_1,2.0:beta_2,2.0:rc1,2.0:rc2,2.0.1