CVE:CVE-2009-4779
CNNVD:CNNVD-201004-351
NukeHall存在多个PHP远程文件包含漏洞，远程攻击者可通过admin/modules/的脚本(1） blocks.php、 (2） messages.php、 和(3） stories.php下spaw_root参数的URL执行任意PHP代码。
solution:Upgrade robert_garrigos nukehall to a higher version than 0.3,0.2:b,0.2.1:b,0.3:rc1,and avoid the version (,0.3],0.2:b,0.2.1:b,0.3:rc1