CVE:CVE-2009-2611
CNNVD:CNNVD-200907-383
当register_globals被激活时，MyFusion (又称MyF)6 Beta(测试版)中的infusions/last_seen_users_panel/last_seen_users_panel.php中的目录遍历漏洞，允许远程攻击者借助settings[locale]参数中的".."放入和运行任意的本地文件。
solution:Upgrade gander myfusion to a higher version than 6:beta,and avoid the version 6:beta