CVE:CVE-2008-2863
CNNVD:CNNVD-200806-359
eLineStudio Site Composer (ESC) 2.6存在多个路径遍历漏洞，远程攻击者通过对(1) folderdel_.asp 或 (2)cms/assetmanager/中的 foldernew.asp的参数中完整的路径名来新建或删除任意目录。
solution:Upgrade elinestudio site_composer to a higher version than 2.6,and avoid the version (,2.6]