CVE:CVE-2007-2670
CNNVD:CNNVD-200705-271
PHPChain 中存在远程攻击者借助提交到(1)settings.php或(2)cat.php的catid参数的无效值，获得安装路径。
solution:Upgrade globalmegacorp phpchain to a higher version than 1.0,and avoid the version (,1.0]