CVE:CVE-2009-2557
CNNVD:CNNVD-200907-308
Admin News Tools 脚本system/download.php 存在目录遍历漏洞。远程攻击者能通过fichier参数(..)读取任意的文件。
solution:Upgrade adminnewstools admin_news_tools to a higher version than 2.5,and avoid the version 2.5