CVE:CVE-2008-4529
CNNVD:CNNVD-200810-155
asiCMS alpha的多个PHP远程文件包含漏洞，远程攻击者可以通过对Association.php, BigMath.php, DiffieHellman.php,DumbStore.php,Extension.php,FileStore.php,HMAC.php,MemcachedStore.php, Message.php,Nonce.php,SQLStore.php,SReg.php,TrustRoot.php,和classes/Auth/OpenID/中的URINorm.php;和classes/Auth/Yadis/中的XRDS.php,XRI.php以及XRIRes.php的_ENV[asicms][path]参数中一个URL来执行任意PHP代码。
solution:Upgrade asicms asicms to a higher version than 0.208:alpha,and avoid the version 0.208:alpha