CVE:CVE-2007-2200
CNNVD:CNNVD-200704-455
Pagode的navigator/navigator_ok.php中存在目录遍历漏洞。远程攻击者可以借助asolute参数(设置为..)读取和可能删除任意文件。
solution:Upgrade pagode pagode to a higher version than 0.5.8,and avoid the version 0.5.8
solution:Upgrade track+ track+ to a higher version than 3.3.2,and avoid the version (,3.3.2]