CVE:CVE-2005-3571
CNNVD:CNNVD-200511-182
CodeGrrl是一个关注于PHP脚本的网站。
CodeGrrl (a) PHPCalendar 1.0、(b) PHPClique 1.0、(c) PHPCurrently 2.0、(d) PHPFanBase 2.1和(e) PHPQuotes 1.0中的PHP文件包含漏洞，可让远程攻击者在启用register_globals时通过siteurl参数包含任意本地文件。注意：后来有报告称PHPFanBase 2.2也受到影响。
solution:Upgrade codegrrl phpcalendar to a higher version than 1.0,and avoid the version (,1.0]; Upgrade codegrrl phpclique to a higher version than 1.0,and avoid the version (,1.0]; Upgrade codegrrl phpcurrently to a higher version than 2.0,and avoid the version (,2.0]; Upgrade codegrrl phpfanbase to a higher version than 2.2,and avoid the version (,2.2]; Upgrade codegrrl phpquotes to a higher version than 1.0,and avoid the version (,1.0]