CVE:CVE-2007-1459
CNNVD:CNNVD-200703-380
WebCreator 0.2.6-rc3及之前版本中存在多个PHP远程文件包含漏洞。远程攻击者可以借助提交到(1)content/load.inc.php,(2)config/load.inc.php,(3)http/load.inc.php和未明的其他文件的moddir参数中的一个URL，执行任意的PHP代码。
solution:Upgrade webcreator webcreator to a higher version than 0.2.5,0.2.6_rc3,and avoid the version 0.2.5,0.2.6_rc3