CVE:CVE-2007-5813
CNNVD:CNNVD-200711-073
ISPworker 1.21版本的download.php中存在多个目录遍历漏洞，远程攻击者可以借助(1) ticketid 和 (2) filename参数（该参数中包含..）读取任意文件。
solution:Upgrade ispworker ispworker to a higher version than 1.21,and avoid the version 1.21