CVE:CVE-2008-1352
CNNVD:CNNVD-200803-245
EdiorCMS (ecms) 3.0的search.php中存在目录遍历漏洞。远程攻击者通过在一个标题搜索时的_SearchTemplate 参数（该参数中包含..）来读取任意文件。
solution:Upgrade hangzhou_network_technology_development ediorcms to a higher version than 3.0,and avoid the version 3.0