CVE:CVE-2008-0814
CNNVD:CNNVD-200802-336
Tracking Requirements和Use Cases (TRUC)的download.PHP存在目录遍历漏洞。远程攻击者可以通过upload_filename参数中的一个“..” 来读取任意文件。
solution:Upgrade truc truc to a higher version than 0.11,and avoid the version 0.11