CVE:CVE-2006-5518
CNNVD:CNNVD-200610-456
Christopher Fowler (Rhode Island) RSSonate存在多个PHP远程文件包含漏洞，远程攻击者可以通过Src/getFeed/inc/目录下(1)xml2rss.php，(2)config_local.php，(3)rssonate.php和(4)sql2xml.php的PROJECT_ROOT参数包含的URL执行任意PHP代码。
solution:Upgrade christopher_fowler rssonate to a higher version than *