CVE:CVE-2009-0729
CNNVD:CNNVD-200902-686
Lingx Page Engine CMS是一个网站CMS。
(1)modules/recent_poll_include.php,(2)modules/login_include.php,和(3) modules/statistics_include.php和(4) configuration.inc.php in includes/的fPrefix参数中的目录遍历序列，包含和运行任意本地文件。
solution:Upgrade lingx page_engine_cms to a higher version than 2.0,and avoid the version 2.0