CVE:CVE-2008-6855
CNNVD:CNNVD-200907-192
Xigla Software Absolute News Feed 1.0可能还有 1.5会允许远程攻击者通过建立某一站点信息来绕过权限和取得管理访问。
solution:Upgrade xigla absolute_news_feed to a higher version than 1.0,1.5,and avoid the version 1.0,1.5