CVE:CVE-2007-4818
CNNVD:CNNVD-200709-119
Txx CMS 0.2中存在多个PHP远程文件包含漏洞，远程攻击者可以借助(1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php,或则(4)modules/目录下mail/mailbox.php的doc_root参数的一个URL执行任意PHP代码。
solution:Upgrade txx_cms txx_cms to a higher version than 0.2,and avoid the version 0.2