CVE:CVE-2006-1485
CNNVD:CNNVD-200603-468
在Greymatter 1.3.1中的gm-upload.cgi可以让远程经过身份验证和拥有上载特权的用户通过上载文件到web根目录下执行任意程序。
solution:Upgrade greymatter greymatter to a higher version than 1.3.1,1.1b,1.2,1.3,1.21,1.21a,1.21b,1.21c,1.21d,and avoid the version (,1.3.1],1.1b,1.2,1.3,1.21,1.21a,1.21b,1.21c,1.21d