CVE:CVE-2006-4423
CNNVD:CNNVD-200608-453
Bigace 1.8.2中存在多个PHP远程文件包含漏洞，远程攻击者可借助以下参数中的URL执行任意PHP代码：(a) system/command/admin.cmd.php，(b) admin/include/upload_form.php和(c) admin/include/item_main.php脚本中的GLOBALS[_BIGACE][DIR][admin]参数；和(d) system/command/admin.cmd.php和(e) system/command/download.cmd.php脚本中的GLOBALS[_BIGACE][DIR][libs]参数。
solution:Upgrade bigace bigace to a higher version than 1.8.2,and avoid the version 1.8.2