CVE:CVE-2006-4062
CNNVD:CNNVD-200608-168
Dmitry Sheiko SAPID Shop 1.2及早期版本的usr/extensions/get_tree.inc.php脚本存在PHP远程文件包含漏洞，远程攻击者可借助GLOBALS[root_path]参数中的URL执行任意PHP代码。
solution:Upgrade dmitry_sheiko sapid_shop to a higher version than 1.2,and avoid the version (,1.2]