CVE:CVE-2006-4026
CNNVD:CNNVD-200608-106
SAPID CMS 123 rc3中存在PHP远程文件包含漏洞，远程攻击者可借助：(1) usr/extensions/get_infochannel.inc.php脚本中的root_path参数和 (2) usr/extensions/get_tree.inc.php脚本中的GLOBALS["root_path"]参数中的URL来执行任意PHP代码。
solution:Upgrade redgraphic sapid_cms to a higher version than 1.2.3:rc3,and avoid the version 1.2.3:rc3