CVE:CVE-2007-6082
CNNVD:CNNVD-200711-326
Sciurus Hosting Panel中的acp/savenews.php存在直接静态代码注入漏洞,远程攻击者借助filecontents参数注入任意PHP代码,可以通过访问includes/news.php执行。
solution:Upgrade sciurus sciurus_hosting_panel to a higher version than 2.0.3,and avoid the version 2.0.3