CVE:CVE-2004-2196
CNNVD:CNNVD-200412-359
Zanfi CMS lite 1.1版本存在漏洞。远程攻击者可以借助直接请求获得服务器全路径，该请求无须(1) adm_pages.php，(2) corr_pages.php，(3) del_block.php，(4) del_page.php，(5)footer.php， (6) home.php和其它.php的请求参数。
solution:Upgrade zanfi_solutions zanfi_cms_lite to a higher version than 1.1,and avoid the version 1.1