CVE:CVE-2006-4878
CNNVD:CNNVD-200609-330
David Bennett PHP-Post (PHPp)的footer.php中存在目录遍历漏洞，远程攻击者可以通过template参数（该参数中包含..）序列读取和包含任意本地文件。
solution:Upgrade david_bennett php-post to a higher version than 1.0.1,and avoid the version (,1.0.1]