CVE:CVE-2009-2973
CNNVD:CNNVD-200908-443
Zeeways ZEEPROPERTY 1.0的viewprofile.php中的无限制文件上传漏洞，远程攻击者可以通过上传一个具有可执行的扩展名的文件(例如，一个剖面图编辑操作中的图片文件)，然后再通过一个直接的对companylogo/的文件的直接请求来访问相关文件，以执行任意代码。
solution:Upgrade google chrome to a higher version than 2.0.172.37,0.2.149.27,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.48,1.0.154.52,1.0.154.53,1.0.154.59,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.172,2.0.172.30,2.0.172.31,2.0.172.33,and avoid the version (,2.0.172.37],0.2.149.27,0.2.149.29,0.2.149.30,0.2.152.1,0.2.153.1,0.3.154.0,0.3.154.3,0.4.154.18,0.4.154.22,0.4.154.31,0.4.154.33,1.0.154.36,1.0.154.39,1.0.154.42,1.0.154.43,1.0.154.46,1.0.154.48,1.0.154.52,1.0.154.53,1.0.154.59,2.0.156.1,2.0.157.0,2.0.157.2,2.0.158.0,2.0.159.0,2.0.172,2.0.172.30,2.0.172.31,2.0.172.33