CVE:CVE-2008-0184
CNNVD:CNNVD-200801-120
Sys-Hotel on Line System的index.php中的完全路径遍历漏洞会允许远程攻击者通过在文件参数中被编码的"/" ("%2F")来阅读任意文件。
solution:Upgrade prenotazioni_on_line syshotel_on_line_system to a higher version than *