CVE:CVE-2006-1371
CNNVD:CNNVD-200603-383
Laurentiu Matei eXpandable主页(XHP) CMS 0.5 及其早期版本可让远程经过身份验证的用户通过以下途径使用HTMLArea FileManager插件来上载和执行任意PHP文件：使用(1) manager.php，(2) standalonemanager.php，和(3) images.php。
solution:Upgrade xhp cms to a higher version than 0.5,and avoid the version (,0.5]