CVE:CVE-2006-4236
CNNVD:CNNVD-200608-317
POWERGAP中存在多个PHP远程文件包含漏洞，远程攻击者可借助提交到：a) s01.php，(b) s02.php，(c) s03.php和(d) s04.php脚本中的shopid参数中的URL；也可能是PATH_INFO中"shopid="或"sid="之后的URL，来执行任意PHP代码。
solution:Upgrade powergap powergap_business to a higher version than *; Upgrade powergap powergap_lite to a higher version than *