CVE:CVE-2006-5618
CNNVD:CNNVD-200610-528
Netref 4的script/cat_for_aff.php中存在目录遍历漏洞，远程攻击者可以借助ad_direct参数中的..(点点)序列读取任意文件。
solution:Upgrade netref netref to a higher version than 4,and avoid the version 4