CVE:CVE-2007-2816
CNNVD:CNNVD-200705-447
ol'bookmarks 存在多个PHP远程文件包含漏洞。远程攻击者可以借助提交到themes/中的(1)test1.php,(2)blackorange.php,(3)default.php,(4)frames1.php,(5)frames1_top.php,(6)test1.php,(7)test2.php,(8)test3.php,(9)test4.php, (10)test5.php,(11)test6.php,(12)frames1_left.php和13)frames1_center.php文件的root参数中的一个URL，执行任意的PHP代码。
solution:Upgrade ol_bookmarks ol_bookmarks to a higher version than 0.7.4,and avoid the version 0.7.4