CVE:CVE-2008-1541
CNNVD:CNNVD-200803-465
HIS Webshop 2.50版本中的cgi-bin/his-webshop.pl存在目录遍历漏洞，它允许远程攻击者借助t参数中的".."，读取任意文件。
solution:Upgrade his webshop to a higher version than 2.50,and avoid the version 2.50