CVE:CVE-2008-6901
CNNVD:CNNVD-200908-514
当register_globals开启，magic_quotes_gpc失效时，2532designs 2532|Gigs 1.2.2 稳定版存在多个目录遍历漏洞。远程攻击者可以借助在(1) settings.php， (2) deleteuser.php， (3) mini_calendar.php， (4) manage_venues.php，和 (5) manage_gigs.php的'..'language参数包含本地任意文件导致执行任意代码。
solution:Upgrade 2532gigs 2532gigs to a higher version than 1.2.2,and avoid the version 1.2.2