CVE:CVE-2008-0521
CNNVD:CNNVD-200801-465
Bubbling Library 1.32中存在多个目录遍历漏洞。远程攻击者借助dispatcher.php中URI参数中的".."读取任意文件。dispatcher.php在以下目录中存在(1)examples/dispatcher/framework/,(2)examples/dispatcher/,(3)examples/wizard/和(4)PHP/。
solution:Upgrade bubbling_library bubbling_library to a higher version than 1.32,and avoid the version 1.32