CVE:CVE-2004-1660
CNNVD:CNNVD-200408-233
CuteNews 1.3.6及其早期版本存在PHP remote file inclusion漏洞。远程攻击者借助(1)show_archives.php或者(2) show_news.php的cutepath参数执行任意PHP代码。
solution:Upgrade cutephp cutenews to a higher version than 1.3.6,and avoid the version (,1.3.6]