CVE:CVE-2009-2398
CNNVD:CNNVD-200907-147
PHP-Sugar 0.80的test/index.php存在目录遍历漏洞会允许远程攻击者通过为参数ｔ赋值..//来阅读任意文件。
solution:Upgrade php-sugar php-sugar to a higher version than 0.80,and avoid the version 0.80