CVE:CVE-2009-4264
CNNVD:CNNVD-200912-139
AROUNDMe中的components/core/connect.php存在PHP远程文件包含漏洞,当register_globals被激活时,远程攻击者可以通过language_path参数的一个URL执行人员PHP代码。
solution:Upgrade aroundme aroundme to a higher version than 0.5.1,0.5.2,0.6.9,and avoid the version 0.5.1,0.5.2,0.6.9; Upgrade barnraiser aroundme to a higher version than 1.1,0.7.7,and avoid the version (,1.1],0.7.7