CVE:CVE-2008-5965
CNNVD:CNNVD-200901-327
LokiCMS 0.3.4及之前版本中的index.php存在目录遍历漏洞。当magic_quotes_gpc被中止时，远程攻击者可以借助页参数中的".."，来检查任意文件是否存在。
solution:Upgrade lokicms lokicms to a higher version than 0.3.4,0.1.0,0.1.0rc1,0.2.0,0.3.0,0.3.1b1,0.3.1b2,0.3.2b1,0.3.3,and avoid the version (,0.3.4],0.1.0,0.1.0rc1,0.2.0,0.3.0,0.3.1b1,0.3.1b2,0.3.2b1,0.3.3