CVE:CVE-2006-7019
CNNVD:CNNVD-200702-303
phpwcms 1.2.5-DEV及其早期版本和RC4版本之前的1.1版本允许远程攻击者可以借助对(1)text_evento和(2)对phpwcms_code_snippets/mail_file_form.php以及sample_ext_php/mail_file_form.php的email_eventonome_evento参数的特制的自变量，执行任意代码。该自变量经过render_PHPcode函数处理。
solution:Upgrade phpwcms phpwcms to a higher version than 1.1_rc3,1.2.5_dev,and avoid the version (,1.1_rc3],(,1.2.5_dev]