CVE:CVE-2007-2369
CNNVD:CNNVD-200704-589
WebSPELL的picture.php文件中存在目录遍历漏洞。远程攻击者可以借助id参数中的..，读取任意文件。
solution:Upgrade php php to a higher version than 4.2.3,and avoid the version (,4.2.3]; Upgrade webspell webspell to a higher version than 4.01.02,and avoid the version (,4.01.02]