CVE:CVE-2006-4647
CNNVD:CNNVD-200609-112
Sponge News 2.2及更早版本的news.php中存在PHP远程文件包含漏洞，远程攻击者可以通过sndir参数中的URL执行任意PHP代码。
solution:Upgrade sponge_news sponge_news to a higher version than 2.2,and avoid the version (,2.2]