CVE:CVE-2006-7052
CNNVD:CNNVD-200702-464
DotWidget For Articles (dotwidgeta) 0.2版本中存在多个PHP远程文件包含漏洞。远程攻击者可以通过提交(a)index.php,(b)showcatpicks.php, 和(c)showarticle.php的(1)文件路径参数；提交(d)admin/authors.php,(e)admin/index.php,(f)admin/categories.php,(g)admin/editconfig.php和(h)admin/articles.php的(2)admin_header_file，(3)admin_footer_file参数中的URL，执行任意代码。
solution:Upgrade keith_reichley dotwidget_for_articles to a higher version than 0.2,and avoid the version 0.2