CVE:CVE-2007-5734
CNNVD:CNNVD-200710-517
eFileMan中存在不限制文件上传漏洞。远程攻击者可以借助未明向量对upload.cgi由upload.html访问的"uploads/upload_file."描述文件名，上传任意文件。
solution:Upgrade efileman efileman to a higher version than 7.1.0.87_88,and avoid the version 7.1.0.87_88