CVE:CVE-2006-3116
CNNVD:CNNVD-200606-593
phpRaid 3.0.4和3.0.5中的多个PHP远程文件包含漏洞。远程攻击者通过以下文件的phpraid_dir参数中的URL执行任意代码：(1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php和(13) view.php。
solution:Upgrade spiffyjr phpraid to a higher version than 3.0.4,3.0.5,and avoid the version 3.0.4,3.0.5