CVE:CVE-2007-2545
CNNVD:CNNVD-200705-103
Persism CMS 中存在多个PHP远程文件包含漏洞。远程攻击者可以借助提交到modules/中的(1)blocks/headerfile.php,(2)files/blocks/latest_files.php,(3)filters/headerfile.php,(4)forums/blocks/latest_posts.php,(5)groups/headerfile.php,(6)links/blocks/links.php,(7)menu/headerfile.php,(8)news/blocks/latest_news.php,(9)settings/headerfile.php或(10)users/headerfile.php的system[path]参数中的一个URL，执行任意代码。
solution:Upgrade persism_cms persism_cms to a higher version than 0.9.2,and avoid the version (,0.9.2]