CVE:CVE-2006-4198
CNNVD:CNNVD-200608-296
Wheatblog (wB) 1.1及早期版本的includes/session.php脚本存在PHP远程文件包含漏洞，远程攻击者可借助wb_class_dir参数中的URL执行任意PHP代码。
solution:Upgrade wheatblog wheatblog to a higher version than 1.1,1.0,and avoid the version (,1.1],1.0