CVE:CVE-2011-0518
CNNVD:CNNVD-201101-323
当magic_quotes_gpc禁用时，LotusCMS Fraise 3.0中的core/lib/router.php中存在目录遍历漏洞。远程攻击者可以借助向index.php传递的system参数包含并执行任意本地文件。
solution:Upgrade lotuscms fraise to a higher version than 3.0,and avoid the version 3.0