CVE:CVE-2007-1126
CNNVD:CNNVD-200702-512
xtcommerce的index.php中存在目录遍历漏洞。远程攻击者可以通过模板参数中的“..”符号，读取任意文件。
solution:Upgrade xt-commerce xt-commerce_community_made_shopping to a higher version than *:rc_1.2,and avoid the version *:rc_1.2