CVE:CVE-2006-6867
CNNVD:CNNVD-200612-668
Vladimir Menshakov buratinable templator(bubla) 0.9.1存在多个PHP远程文件包含漏洞，远程攻击者可通过传给(1)bu/bu_claro.php，(2)bu/bu_cache.php或(3)bu/bu_parse.php的bu_dir参数内的URL来执行任意PHP代码。
solution:Upgrade vladimir_meshakov bubla to a higher version than 0.9.1,and avoid the version 0.9.1