CVE:CVE-2009-2552
CNNVD:CNNVD-200907-303
Super Simple Blog Script 脚本comments.php 存在多个目录遍历漏洞。远程攻击者能借助输入参数覆盖、引用或者执行任意的本地文件。
solution:Upgrade supersimple super_simple_blog_script to a higher version than 2.5.4,and avoid the version 2.5.4