CVE:CVE-2007-5786
CNNVD:CNNVD-200711-008
GoSamba存在多个PHP远程文件包含漏洞。远程攻击者可以借助对(1) HTML_oben.php, (2) inc_freigabe.php, (3) inc_freigabe1.php, 或 (4)/include的inc_freigabe3.php ; (5) inc_group.php; (6) inc_manager.php; (7) inc_newgroup.php; (8) inc_smb_conf.php; (9) inc_user.php; 或 (10) main.php的include_path参数中的一个URL，执行任意PHP代码。
solution:Upgrade a-enterprise gosamba to a higher version than 1.0.1,and avoid the version 1.0.1