CVE:CVE-2007-6187
CNNVD:CNNVD-200711-422
PHP Content Architect (又称NoAh)中存在多个目录遍历漏洞，远程攻击者借助noah/modules/nosystem/templates/中的(1) css_file.php, (2) js_file.php,或(3) xml_file.php的filepath参数(参数包含一个"..")读取任意文件。
solution:Upgrade noah noah to a higher version than 0.9_pre_1.2,and avoid the version (,0.9_pre_1.2]