CVE:CVE-2006-4329
CNNVD:CNNVD-200608-388
Shadows Rising RPG (Pre-Alpha) 0.0.5b及早期版本中存在多个PHP远程文件包含漏洞，远程攻击者可借助提交到以下脚本的CONFIG[gameroot]参数中的URL执行任意PHP代码：(1) core/includes/security.inc.php，(2) core/includes/smarty.inc.php，(3) qcms/includes/smarty.inc.php或 (4) qlib/smarty.inc.php脚本。
solution:Upgrade shadows_rising_rpg shadows_rising_rpg to a higher version than 0.0.5b_pre-alpha,and avoid the version (,0.0.5b_pre-alpha]