CVE:CVE-2006-1707
CNNVD:CNNVD-200604-132
Shopweezle 2.0 中的index.php页面允许远程攻击者借助于url参数包含任意本地文件。
solution:Upgrade kansok_communications shopweezle to a higher version than 2.0,2.0_personal,2.0_professional,2.0_professional_plus,and avoid the version 2.0,2.0_personal,2.0_professional,2.0_professional_plus