CVE:CVE-2006-4639
CNNVD:CNNVD-200609-118
C-News.fr C-News中存在多个PHP远程文件包含漏洞，在启用register_globals时，远程攻击者通过以下文件路径参数中的URL执行任意PHP代码：(1) formulaire_commentaires.php, (2) affichage/liste_news.php, (3) affichage/news_complete.php或(4) affichage/pagination.php。
solution:Upgrade c-news.fr c-news to a higher version than 1.0.1,and avoid the version (,1.0.1]