CVE:CVE-2006-5234
CNNVD:CNNVD-200610-100
phpWebSite 0.10.2中的多个PHP远程文件包含漏洞，远程攻击者可以通过(1) init.php, (2) users.php, (3) Cookie.php, (4) forms.php, (5) Groups.php, (6) ModSetting.php, (7) Calendar.php, (8) DateTime.php, (9) core.php, (10) ImgLibrary.php, (11) Manager.php, and (12) Template.php和(13) EZform.php的PHPWS_SOURCE_DIR参数中的URL执行任意PHP代码。
solution:Upgrade phpwebsite phpwebsite to a higher version than 0.10.2,and avoid the version 0.10.2