CVE:CVE-2009-4421
CNNVD:CNNVD-200912-354
Simple PHP Blog中的languages_cgi.php存在目录游历漏洞，远程验证用户可以借助blog_language1参数的一个".."包含并执行任意本地文件。
solution:Upgrade alexander_palmo simple_php_blog to a higher version than 0.5.1,0.3.7c,0.4.0,0.4.5,0.4.6,0.4.7,0.4.7.1,0.5.0.1,and avoid the version (,0.5.1],0.3.7c,0.4.0,0.4.5,0.4.6,0.4.7,0.4.7.1,0.5.0.1