CVE:CVE-2008-5856
CNNVD:CNNVD-200901-045
ClaSS 0.8.61之前的版本中的scripts/export.php存在目录遍历漏洞。远程攻击者可以借助ftype参数中的目录遍历序列，读取任意文件。
solution:Upgrade class class to a higher version than 0.8.60,0.4:beta,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.6.0,0.6.1,0.8:rc2,0.8.0,0.8.0:rc1,0.8.5,0.8.8,0.8.10,0.8.14,0.8.20,0.8.26,0.8.29,0.8.32,0.8.40,0.8.47,0.8.51,0.8.56,0.8.59,and avoid the version (,0.8.60],0.4:beta,0.4.0,0.4.1,0.4.2,0.5.0,0.5.1,0.5.2,0.6.0,0.6.1,0.8:rc2,0.8.0,0.8.0:rc1,0.8.5,0.8.8,0.8.10,0.8.14,0.8.20,0.8.26,0.8.29,0.8.32,0.8.40,0.8.47,0.8.51,0.8.56,0.8.59