CVE:CVE-2006-3317
CNNVD:CNNVD-200606-600
phpRaid 3.0.6中的PHP远程文件包含漏洞。远程攻击者通过(1) announcements.php和(2) rss.php的phpraid_dir参数中的URL执行任意代码。
solution:Upgrade spiffyjr phpraid to a higher version than 3.0.6,and avoid the version 3.0.6