CVE:CVE-2011-5136
CNNVD:CNNVD-201208-650
EPractize Labs Subscription Manager 1.0版本中的showImg.php中存在漏洞。远程攻击者可利用db参数重写任意文件。
solution:Upgrade epractizelabs subscription_manager to a higher version than 1.0,and avoid the version 1.0