CVE:CVE-2008-1798
CNNVD:CNNVD-200804-202
Dragoon 0.1的forum/kietu/libs/calendrier.php中存在目录遍历漏洞会允许远程攻击者通过cal[lng]参数（该参数中包含..）来包含和执行任意本地文件。
solution:Upgrade dragoon dragoon to a higher version than 0.1,and avoid the version 0.1
solution:Upgrade vmware ace to a higher version than 1.0,2.0,and avoid the version 1.0,2.0; Upgrade vmware player to a higher version than 1.0.2,1.0.3,1.0.4,1.0.5,2.0,2.0.1,2.0.2,and avoid the version 1.0.2,1.0.3,1.0.4,1.0.5,2.0,2.0.1,2.0.2; Upgrade vmware server to a higher version than 1.0.3,and avoid the version 1.0.3; Upgrade vmware vmware_server to a higher version than 1.0.2,1.0.4,and avoid the version 1.0.2,1.0.4; Upgrade vmware vmware_workstation to a higher version than 5.5.5,6.0.1,6.0.2,and avoid the version 5.5.5,6.0.1,6.0.2; Upgrade vmware workstation to a higher version than 5.5,5.5.3_build_34685,5.5.3_build_42958,5.5.4,5.5.4_build_44386,6.0,and avoid the version 5.5,5.5.3_build_34685,5.5.3_build_42958,5.5.4,5.5.4_build_44386,6.0