CVE:CVE-2008-2534
CNNVD:CNNVD-200806-049
Phoenix View CMS Pre Alpha2以及之前的版本中的admin/admin_frame.php存在目录遍历漏洞。远程攻击者可以借助ltarget参数中的".."，放入和运行任意的本地文件。
solution:Upgrade fkrauthan phoenix_view_cms to a higher version than 2-pre-alpha,and avoid the version 2-pre-alpha