CVE:CVE-2010-1922
CNNVD:CNNVD-201005-178
29o3 CMS存在多个PHP远程文件包含漏洞，远程攻击者可通过(1) lib/page/pageDescriptionObject.php, 和(2) layoutHeaderFuncs.php, (3) layoutManager.php, 和(4) layoutParser.php in lib/layout/的LibDir参数的URL执行任意PHP代码。
solution:Upgrade 29o3_cms 29o3_cms to a higher version than 0.1,and avoid the version 0.1