CVE:CVE-2006-4530
CNNVD:CNNVD-200609-010
membrepass 1.5的include/change.php中的直接静态代码注入漏洞，远程攻击者可以通过注入include/variable.php中的aifon参数执行任意PHP代码。
solution:Upgrade membrepass membrepass to a higher version than 1.5,and avoid the version 1.5