CVE:CVE-2009-2379
CNNVD:CNNVD-200907-127
BIGACE Web CMS 2.6中的public/index.php存在目录遍历漏洞，允许远程攻击者借助cmd参数中的".."放入和运行任意的本地文件。
solution:Upgrade bigace bigace_cms to a higher version than 2.6,and avoid the version 2.6