CVE:CVE-2000-0769
CNNVD:CNNVD-200010-058
O'Reilly WebSite Pro 2.3.7版本安装带有对全部用户执行许可的uploader.exe程序。远程攻击者可以通过直接调用uploader.exe创建并执行任意文件。
solution:Upgrade oreilly website_pro to a higher version than 2.3.7,and avoid the version (,2.3.7]