CVE:CVE-2006-4531
CNNVD:CNNVD-200609-002
Pheap CMS的lib/config.php中存在PHP远程文件包含漏洞，远程攻击者可以通过lpref参数中的URL执行任意 PHP代码。
solution:Upgrade bare_concept_media pheap_cms to a higher version than 1.1,and avoid the version (,1.1]