CVE:CVE-2006-4278
CNNVD:CNNVD-200608-340
SportsPHool 1.0的includes/layout/plain.footer.php脚本存在PHP远程文件包含漏洞，远程攻击者可借助mainnav参数中的URL执行任意PHP代码。
solution:Upgrade sportsphool sportsphool to a higher version than 1.0,and avoid the version 1.0