CVE:CVE-2005-1169
CNNVD:CNNVD-200505-330
Mafia Blog .4 BETA并不能正确保护admin目录，从而允许远程攻击者通过使用writeinfo.php以将代码注入到info.php来执行任意PHP代码。
solution:Upgrade mafia mafia_blog to a higher version than 4_beta,and avoid the version 4_beta