CVE:CVE-2004-2602
CNNVD:CNNVD-200412-969
UberTec Help Center Live (HCL) 1.2.7之前版本存在PHP远程文件包含漏洞。远程攻击者可以借助pipe.php中HCL_path参数的URL执行任意PHP代码。
solution:Upgrade ubertec help_center_live to a higher version than 1.1,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,and avoid the version 1.1,1.2.0,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6