CVE:CVE-2008-4138
CNNVD:CNNVD-200809-327
Technote 7的skin_shop/standard/3_plugin_twindow/twindow_notice.php中存在PHP远程文件包含漏洞。远程攻击者通过shop_this_skin_path参数中的一个URL来执行任意PHP代码。
solution:Upgrade technote technote to a higher version than 7,and avoid the version 7