CVE:CVE-2003-1292
CNNVD:CNNVD-200312-249
Derek Ashauer ashNews 0.83版本存在PHP远程文件列入漏洞。远程攻击者借助(1)ashnews.php和(2)ashheadlines.php中pathtoashnews参数的URL执行任意远程文件。
solution:Upgrade ashwebstudio ashnews to a higher version than 0.83,and avoid the version 0.83