CVE:CVE-2010-1360
CNNVD:CNNVD-201004-184
FAQEngine 多个path_faqe参数存在PHP远程文件包含漏洞。远程攻击者可以借助多个脚本的path_faqe参数的URL执行任意的PHP代码。这些脚本包括：(1) attachs.php、 (2) backup.php、 (3) badwords.php、 (4) categories.php、 (5) changepw.php、 (6) colorchooser.php、 (7) colorwheel.php、 (8) dbfiles.php、 (9) diraccess.php、 (10) faq.php、 (11) index.php、 (12) kb.php和 (13) stats.php的path_faqe参数。
solution:Upgrade boesch-it faqengine to a higher version than 4.24.00,and avoid the version 4.24.00