CVE:CVE-2007-5148
CNNVD:CNNVD-200710-032
FrontAccounting (FA)存在多个PHP远程文件包含漏洞，远程攻击者可以借助(1) access/logout.php的path_to_root参数的一个URL或(2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, (7) purchasing/, (8) reporting/, (9) sales/,或(10) taxes/下的特定PHP 脚本执行任意PHP代码。
solution:Upgrade frontaccounting frontaccounting to a higher version than 1.12,and avoid the version 1.12